CVE-2021-22899

No fix known ExploitedEPSS 23%CVSS 8.8

A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature

Published 2021-05-27 · In CISA KEV since 2021-11-03 · CVE record · OSV

Products: ivanti connect_secure