VYPR
← All advisories
High severity8.8CISA KEVNVD Advisory· Published May 27, 2021· Updated Jun 17, 2026

CVE-2021-22899

CVE-2021-22899

Description

A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature

Affected products

43
  • Ivanti/Connect Secure41 versions
    cpe:2.3:a:ivanti:connect_secure:9.0:-:*:*:*:*:*:*+ 40 more
    • cpe:2.3:a:ivanti:connect_secure:9.0:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r1.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r2.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r2.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r3.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r3.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r3.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r3.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r3.5:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r4.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r4.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r5.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r6.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:rx:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r10.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r10.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r5:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r6:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r7:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r8.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r8.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r8.4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r8:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r9.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r9.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r9:*:*:*:*:*:*
  • Pulse Connect Secure/Pulse Connect Securedescription
  • Pulsesecure/Pulse Connect Securellm-fuzzy
    Range: <9.1R11.4

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.