CyberSecBulletin

Pulse Connect Secure vulnerabilities

We track 4 vulnerabilities in Pulse Connect Secure products. 4 are rated high or critical, and 4 have been exploited in real attacks. The most recent was published on May 27, 2021.

4vulnerabilities
1critical
3high
4exploited
8.7average CVSS score

Latest Pulse Connect Secure vulnerabilities

  • 8.8 High severity

    Ivanti Pulse Connect Secure Command Injection Exploited

    CVE-2021-22899Pulse Connect SecureEPSS 22.9%

    A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature

  • 8.8 High severity

    Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Exploited

    CVE-2021-22894Pulse Connect SecureEPSS 41.3%

    A buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to execute arbitrary code as the root user via maliciously crafted meeting room.

  • 10.0 Critical severity

    Ivanti Pulse Connect Secure Use-After-Free Exploited

    CVE-2021-22893Pulse Connect SecureEPSS 47.5%

    Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse Connect Secure that can allow an unauthenticated user to perform remo

  • 7.2 High severity

    Pulse Connect Secure Code Injection Exploited

    CVE-2020-8218Pulse Connect SecureEPSS 32.3%

    A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.