VYPR
← All advisories
High severity7.2CISA KEVNVD Advisory· Published May 27, 2021· Updated Jun 17, 2026

CVE-2021-22900

CVE-2021-22900

Description

A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.

Affected products

43
  • Ivanti/Connect Secure40 versions
    cpe:2.3:a:ivanti:connect_secure:9.0:-:*:*:*:*:*:*+ 39 more
    • cpe:2.3:a:ivanti:connect_secure:9.0:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r1.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r2.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r2.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r3.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r3.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r3.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r3.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r3.5:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r4.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r4.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r5.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:r6.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r10.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r10.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r5:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r6:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r7:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r8.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r8.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r8.4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r8:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r9.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r9.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r9:*:*:*:*:*:*
  • Pulsesecure/Pulse Connect Secure2 versions
    cpe:2.3:a:pulsesecure:pulse_connect_secure:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:pulsesecure:pulse_connect_secure:*:*:*:*:*:*:*:*range: <=9.1
    • (no CPE)range: <9.1R11.4
  • Pulse Connect Secure/Pulse Connect Securedescription

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.