CVE-2021-22938

No fix known EPSS 2%

A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command injection via an unsanitized web parameter in the administrator web console.

Published 2021-08-16 · CVE record · OSV

Products: ivanti connect_secure, pulsesecure pulse_connect_secure