CVE-2021-22899 - AskarLabs CVE Database

CVE-2021-22899

Vendor N/A

Product Pulse Connect Secure

Weakness CWE-77

KEV Status Known Exploited

Published May 27, 2021

Last update October 21, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature

CISA mandated remediation

02CISA Required Action

Apply updates per vendor instructions.

Key dates

03Disclosure timeline

May 27, 2021 CVE published

October 21, 2025 Record updated

External resources

04References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-22899 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/77.html CISA KEV Reference https://www.cisa.gov/news-events/directives/ed-21-03-mitigate-… CISA KEV Reference https://nvd.nist.gov/vuln/detail/CVE-2021-22899