CVE-2021-22938CWE-77

A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command injection via an unsanitized web parameter…

published August 16, 2021

CVSS
—
EPSS
2%
Percentile
81.6
In the wild
Unconfirmed
What it is

A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command injection via an unsanitized web parameter in the administrator web console.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02101 · 81.6th percentile
Weakness
CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
Published
2021-08-16T18:38Z
EPSS history
Timeline
  • 16 AUG 18:38Z
    A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command injection via an unsanitized web parameter…
    cvelistv5