CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2021-22900

🔥 Known Exploited (CISA KEV)HIGH
7.2
CVSS Severity Score
EPSS Score49.0240%
EPSS Percentile95.56th
Published2021-05-27
Last Modified2025-12-18
Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.

Affected Platforms (CPE)

📦
Ivanti

Connect Secure

= 9.0= 9.1
📦
Pulsesecure

Pulse Connect Secure

<= 9.1

References & Advisories

🔗 https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/?kA23Z000000boUWSAY
🔗 https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/?kA23Z000000boUWSAY
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22900

相關漏洞威脅

CVE-2026-167284.8

undici's retry interceptor can deliver a response whose body length does not match the Content-Length header exposed to the applic...

CVE-2026-132687.8

G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local atta...

CVE-2026-672017.7

V through 0.5.2, fixed in commit 85859f0, contains a server-side request forgery (SSRF) bypass vulnerability that allows attackers...

CVE-2026-598986.3

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, ab attack...