CVE-2021-22936

No fix known EPSS <1%

A vulnerability in Pulse Connect Secure before 9.1R12 could allow a threat actor to perform a cross-site script attack against an authenticated administrator via an unsanitized web parameter.

Published 2021-08-16 · CVE record · OSV

Products: ivanti connect_secure, pulsesecure pulse_connect_secure