Unrated severityCISA KEVNVD Advisory· Published May 27, 2021· Updated Oct 21, 2025
CVE-2021-22899
CVE-2021-22899
Description
A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature
Affected products
2- Pulse Connect Secure/Pulse Connect Securedescription
- Range: <9.1R11.4
Patches
Vulnerability mechanics
References
1- kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.