Share:

CVE-2021-22899 - Pulsesecure Pulse Connect Secure

May 27, 2021

Critical 8.8

A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature

Affected software

Pulsesecure Pulse Connect Secure

Reference links

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/?kA23Z000000boUWSAY

Get alerted to vulnerabilities in your software

CVE alerts, vulnerability alerts, latest versions and news matched to your software stack.