CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-22900

A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.008

EPSS Ranking 73.4%

CVSS Severity

CVSS v3 Score 7.2

CVSS v2 Score 6.5

Proposed Action

Ivanti Pulse Connect Secure contains an unrestricted file upload vulnerability that allows an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.

Ransomware Campaign

Unknown

References

Products affected by CVE-2021-22900

Ivanti » Connect Secure » Version: 9.0

cpe:2.3:a:ivanti:connect_secure:9.0
Ivanti » Connect Secure » Version: 9.1

cpe:2.3:a:ivanti:connect_secure:9.1
Pulsesecure » Pulse Connect Secure » Version: N/A

cpe:2.3:a:pulsesecure:pulse_connect_secure:-
Pulsesecure » Pulse Connect Secure » Version: 7.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.1
Pulsesecure » Pulse Connect Secure » Version: 7.4

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4
Pulsesecure » Pulse Connect Secure » Version: 7.4r1.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r1.0
Pulsesecure » Pulse Connect Secure » Version: 7.4r10.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r10.0
Pulsesecure » Pulse Connect Secure » Version: 7.4r11.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r11.0
Pulsesecure » Pulse Connect Secure » Version: 7.4r11.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r11.1
Pulsesecure » Pulse Connect Secure » Version: 7.4r12.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r12.0
Pulsesecure » Pulse Connect Secure » Version: 7.4r13.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r13.0
Pulsesecure » Pulse Connect Secure » Version: 7.4r13.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r13.1
Pulsesecure » Pulse Connect Secure » Version: 7.4r13.2

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r13.2
Pulsesecure » Pulse Connect Secure » Version: 7.4r13.3

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r13.3
Pulsesecure » Pulse Connect Secure » Version: 7.4r2.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r2.0
Pulsesecure » Pulse Connect Secure » Version: 7.4r3.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r3.0
Pulsesecure » Pulse Connect Secure » Version: 7.4r4.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r4.0
Pulsesecure » Pulse Connect Secure » Version: 7.4r5.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r5.0
Pulsesecure » Pulse Connect Secure » Version: 7.4r6.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r6.0
Pulsesecure » Pulse Connect Secure » Version: 7.4r7.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r7.0
Pulsesecure » Pulse Connect Secure » Version: 7.4r8.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r8.0
Pulsesecure » Pulse Connect Secure » Version: 7.4r9.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r9.0
Pulsesecure » Pulse Connect Secure » Version: 7.4r9.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r9.1
Pulsesecure » Pulse Connect Secure » Version: 7.4r9.2

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r9.2
Pulsesecure » Pulse Connect Secure » Version: 7.4r9.3

cpe:2.3:a:pulsesecure:pulse_connect_secure:7.4r9.3
Pulsesecure » Pulse Connect Secure » Version: 8.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r1.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r1.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r1.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r1.1
Pulsesecure » Pulse Connect Secure » Version: 8.0r10.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r10.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r13.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r13.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r13.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r13.1
Pulsesecure » Pulse Connect Secure » Version: 8.0r15.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r15.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r15.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r15.1
Pulsesecure » Pulse Connect Secure » Version: 8.0r16.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r16.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r16.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r16.1
Pulsesecure » Pulse Connect Secure » Version: 8.0r17.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r17.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r2.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r2.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r3.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r3.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r3.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r3.1
Pulsesecure » Pulse Connect Secure » Version: 8.0r3.2

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r3.2
Pulsesecure » Pulse Connect Secure » Version: 8.0r4.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r4.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r4.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r4.1
Pulsesecure » Pulse Connect Secure » Version: 8.0r5.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r5.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r6.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r6.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r7.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r7.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r7.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r7.1
Pulsesecure » Pulse Connect Secure » Version: 8.0r8.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r8.0
Pulsesecure » Pulse Connect Secure » Version: 8.0r8.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r8.1
Pulsesecure » Pulse Connect Secure » Version: 8.0r9.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.0r9.0
Pulsesecure » Pulse Connect Secure » Version: 8.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1
Pulsesecure » Pulse Connect Secure » Version: 8.1r1.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r1.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r1.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r1.1
Pulsesecure » Pulse Connect Secure » Version: 8.1r10.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r10.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r11.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r11.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r11.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r11.1
Pulsesecure » Pulse Connect Secure » Version: 8.1r12.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r12.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r12.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r12.1
Pulsesecure » Pulse Connect Secure » Version: 8.1r13.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r13.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r14.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r14.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r2.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r2.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r2.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r2.1
Pulsesecure » Pulse Connect Secure » Version: 8.1r3.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r3.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r3.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r3.1
Pulsesecure » Pulse Connect Secure » Version: 8.1r3.2

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r3.2
Pulsesecure » Pulse Connect Secure » Version: 8.1r4.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r4.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r4.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r4.1
Pulsesecure » Pulse Connect Secure » Version: 8.1r5.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r5.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r6.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r6.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r7.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r7.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r8.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r8.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r9.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r9.0
Pulsesecure » Pulse Connect Secure » Version: 8.1r9.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r9.1
Pulsesecure » Pulse Connect Secure » Version: 8.1r9.2

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r9.2
Pulsesecure » Pulse Connect Secure » Version: 8.1rx

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1rx
Pulsesecure » Pulse Connect Secure » Version: 8.2

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2
Pulsesecure » Pulse Connect Secure » Version: 8.2r1.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r1.0
Pulsesecure » Pulse Connect Secure » Version: 8.2r1.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r1.1
Pulsesecure » Pulse Connect Secure » Version: 8.2r10.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r10.0
Pulsesecure » Pulse Connect Secure » Version: 8.2r11.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r11.0
Pulsesecure » Pulse Connect Secure » Version: 8.2r12.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r12.0
Pulsesecure » Pulse Connect Secure » Version: 8.2r2.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r2.0
Pulsesecure » Pulse Connect Secure » Version: 8.2r3.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r3.0
Pulsesecure » Pulse Connect Secure » Version: 8.2r3.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r3.1
Pulsesecure » Pulse Connect Secure » Version: 8.2r4.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r4.0
Pulsesecure » Pulse Connect Secure » Version: 8.2r4.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r4.1
Pulsesecure » Pulse Connect Secure » Version: 8.2r5.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r5.0
Pulsesecure » Pulse Connect Secure » Version: 8.2r5.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r5.1
Pulsesecure » Pulse Connect Secure » Version: 8.2r6.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r6.0
Pulsesecure » Pulse Connect Secure » Version: 8.2r7.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r7.0
Pulsesecure » Pulse Connect Secure » Version: 8.2r7.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r7.1
Pulsesecure » Pulse Connect Secure » Version: 8.2r7.2

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r7.2
Pulsesecure » Pulse Connect Secure » Version: 8.2r8.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r8.0
Pulsesecure » Pulse Connect Secure » Version: 8.2r8.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r8.1
Pulsesecure » Pulse Connect Secure » Version: 8.2r8.2

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r8.2
Pulsesecure » Pulse Connect Secure » Version: 8.2r9.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r9.0
Pulsesecure » Pulse Connect Secure » Version: 8.2rx

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2rx
Pulsesecure » Pulse Connect Secure » Version: 8.3

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3
Pulsesecure » Pulse Connect Secure » Version: 8.3r1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r1
Pulsesecure » Pulse Connect Secure » Version: 8.3r1.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r1.1
Pulsesecure » Pulse Connect Secure » Version: 8.3r2

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r2
Pulsesecure » Pulse Connect Secure » Version: 8.3r2.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r2.1
Pulsesecure » Pulse Connect Secure » Version: 8.3r3

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r3
Pulsesecure » Pulse Connect Secure » Version: 8.3r4

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r4
Pulsesecure » Pulse Connect Secure » Version: 8.3r5

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r5
Pulsesecure » Pulse Connect Secure » Version: 8.3r5.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r5.1
Pulsesecure » Pulse Connect Secure » Version: 8.3r5.2

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r5.2
Pulsesecure » Pulse Connect Secure » Version: 8.3r6

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r6
Pulsesecure » Pulse Connect Secure » Version: 8.3r6.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r6.1
Pulsesecure » Pulse Connect Secure » Version: 8.3r7

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3r7
Pulsesecure » Pulse Connect Secure » Version: 8.3rx

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3rx
Pulsesecure » Pulse Connect Secure » Version: 9.0

cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0
Pulsesecure » Pulse Connect Secure » Version: 9.0r1

cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r1
Pulsesecure » Pulse Connect Secure » Version: 9.0r2

cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r2
Pulsesecure » Pulse Connect Secure » Version: 9.0r2.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r2.1
Pulsesecure » Pulse Connect Secure » Version: 9.0r3

cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r3
Pulsesecure » Pulse Connect Secure » Version: 9.0r3.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r3.1
Pulsesecure » Pulse Connect Secure » Version: 9.0r3.2

cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r3.2
Pulsesecure » Pulse Connect Secure » Version: 9.0rx

cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0rx
Pulsesecure » Pulse Connect Secure » Version: 9.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:9.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-22900

Products

Pricing

Contact Us