CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2021-22899

🔥 Known Exploited (CISA KEV)HIGH
8.8
CVSS Severity Score
EPSS Score61.3950%
EPSS Percentile94.55th
Published2021-05-27
Last Modified2025-12-18
Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature

Affected Platforms (CPE)

📦
Ivanti

Connect Secure

= 9.0= 9.1

References & Advisories

🔗 https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/?kA23Z000000boUWSAY
🔗 https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/?kA23Z000000boUWSAY
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22899

相關漏洞威脅

CVE-2026-167284.8

undici's retry interceptor can deliver a response whose body length does not match the Content-Length header exposed to the applic...

CVE-2026-132687.8

G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local atta...

CVE-2026-672017.7

V through 0.5.2, fixed in commit 85859f0, contains a server-side request forgery (SSRF) bypass vulnerability that allows attackers...

CVE-2026-598986.3

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, ab attack...