Vulnerabilities CVE-2021-22893

CVE-2021-22893

Medium

Open

KEV

TLP:CLEAR

Ivanti Pulse Connect Secure Use-After-Free Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse Connect Secure that can allow an unauthenticated user to perform remote arbitrary code execution on the Pulse Connect Secure gateway. This vulnerability has been exploited in the wild.

Details

EPSS Score ⓘ: 47.17%

98.7th percentile
Confidence: 100%
Published: Apr 23, 2021
Last Modified: Aug 12, 2026
CISA KEV
Date Added: Nov 3, 2021
Patch Due: May 3, 2022
Required Action: Apply updates per vendor instructions.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.