CVE-2021-22899 · Sandworm Watch

Nov 3, 2021high

CVE-2021-22899: Ivanti Pulse Connect Secure Command Injection Vulnerability

Ivanti Pulse Connect Secure contains a command injection vulnerability that allows remote authenticated users to perform remote code execution via Windows File Resource Profiles. Required action: Apply updates per vendor instructions.

CVE-2021-22899EPSS 22.3%IvantiPulse Connect Secure

CISA KEV ↗ · unattributed attribution