vulnerability

Pulse Secure Pulse Connect Secure: CVE-2021-22935: 9.1R12 Security Fixes (SA44858)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:S/C:P/I:P/A:P)

Published

Aug 6, 2021

Added

Aug 6, 2021

Modified

Feb 15, 2024

Description

A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command injection via an unsanitized web parameter.

Solution

pulse-secure-pulse-connect-secure-upgrade-9_1r12

References

CVE-2021-22935
https://attackerkb.com/topics/CVE-2021-22935
https://forums.ivanti.com/s/article/SA44858?language=en_US

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report