CVE-2021-22893 · Sandworm Watch

Nov 3, 2021high

CVE-2021-22893: Ivanti Pulse Connect Secure Use-After-Free Vulnerability

Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via license services. Required action: Apply updates per vendor instructions.

CVE-2021-22893EPSS 47.2%IvantiPulse Connect Secure

CISA KEV ↗ · unattributed attribution