PatchTheCVEpulsesecure vulnerabilities
Recent CVEs affecting pulsesecure products. 13 tracked.
pulsesecure has 13 tracked vulnerabilities, 0 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 12. Most recent: 2022-09-30. Highest priority: CVE-2021-22900 (score 74/100).
- CVE-2022-21826 MEDIUM 5.4 DOWNGRADE UPGRADE Pulse Secure version 9.115 and below may be susceptible to client-side http request smuggling, When the applic
- CVE-2021-44720 HIGH 7.2 DOWNGRADE UPGRADE In Ivanti Pulse Secure Pulse Connect Secure (PCS) before 9.1R12, the administrator password is stored in the H
- CVE-2021-31922 HIGH 7.5 UPGRADE An HTTP Request Smuggling vulnerability in Pulse Secure Virtual Traffic Manager before 21.1 could allow an att
- CVE-2021-22965 HIGH 7.5 DOWNGRADE UPGRADE A vulnerability in Pulse Connect Secure before 9.1R12.1 could allow an unauthenticated administrator to causes
- CVE-2021-22938 HIGH 7.2 DOWNGRADE UPGRADE A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform co
- CVE-2021-22937 HIGH 7.2 DOWNGRADE UPGRADE A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform a
- CVE-2021-22936 MEDIUM 6.1 DOWNGRADE UPGRADE A vulnerability in Pulse Connect Secure before 9.1R12 could allow a threat actor to perform a cross-site scrip
- CVE-2021-22935 HIGH 7.2 DOWNGRADE UPGRADE A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform co
- CVE-2021-22934 HIGH 7.2 DOWNGRADE UPGRADE A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator or compromise
- CVE-2021-22933 MEDIUM 6.5 DOWNGRADE UPGRADE A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform an
- CVE-2021-22908 HIGH 8.8 DOWNGRADE DOWNGRADE A buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote authenticated
- CVE-2021-22900 HIGH 7.2 EXPLOITED DOWNGRADE UPGRADE Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability
- CVE-2021-22887 LOW 2.3 MITIGATE MITIGATE A vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000 could allow an at
FAQ
How do I fix pulsesecure vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is pulsesecure being exploited right now?
Yes: 1 pulsesecure CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.
Which pulsesecure CVE should I patch first?
CVE-2021-22900 currently ranks highest (74/100): Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability.