CRITICALCVSS 10.0KNOWN EXPLOITEDRANSOMWARE: KNOWN

CVE-2021-22893

CVE-2021-22893 updated by NVD

Published: 2021-11-03
Modified: 2026-09-21
Sources: cisa-kev, nvd

Summary

Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse Connect Secure that can allow an unauthenticated user to perform remote arbitrary code execution on the Pulse Connect Secure gateway. This vulnerability has been exploited in the wild.

References

https://nvd.nist.gov/vuln/detail/CVE-2021-22893

Includes data from the CISA Known Exploited Vulnerabilities catalog.

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.