← Back to browse · API

CVE-2021-22899

Severity
HIGH
CVSS
8.8
EPSS
0.22343
Risk score
68.02
CISA KEV
Yes
PoC
No
Published
2021-05-27
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2021-10031, GHSA-3V8C-432M-393W
Products
Ivanti:Pulse Connect Secure, n/a:Pulse Connect Secure Fixed in 9.1R11.4
Sources
cisa.gov CVE-2021-22899
euvd EUVD-2021-10031

Description

A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature

References