CVE-2021-22965: High severity PulseSecure Pulse Connect Secure vulnerability
Published Nov 19, 2021
·Updated
A vulnerability in Pulse Connect Secure before 9.1R12.1 could allow an unauthenticated administrator to causes a denial of service when a malformed request is sent to the device.
Affected Software
51 affected components
PulseSecure Pulse Connect Secure<9.1
PulseSecure Pulse Connect Secure=9.1
PulseSecure Pulse Connect Secure=9.1-r1
PulseSecure Pulse Connect Secure=9.1-r10.0
PulseSecure Pulse Connect Secure=9.1-r10.2
PulseSecure Pulse Connect Secure=9.1-r11.0
PulseSecure Pulse Connect Secure=9.1-r11.1
PulseSecure Pulse Connect Secure=9.1-r11.3
PulseSecure Pulse Connect Secure=9.1-r11.4
PulseSecure Pulse Connect Secure=9.1-r12
PulseSecure Pulse Connect Secure=9.1-r2
PulseSecure Pulse Connect Secure=9.1-r3
PulseSecure Pulse Connect Secure=9.1-r4
PulseSecure Pulse Connect Secure=9.1-r4.1
PulseSecure Pulse Connect Secure=9.1-r4.2
PulseSecure Pulse Connect Secure=9.1-r4.3
PulseSecure Pulse Connect Secure=9.1-r5
PulseSecure Pulse Connect Secure=9.1-r6
PulseSecure Pulse Connect Secure=9.1-r7
PulseSecure Pulse Connect Secure=9.1-r8
PulseSecure Pulse Connect Secure=9.1-r8.1
PulseSecure Pulse Connect Secure=9.1-r8.2
PulseSecure Pulse Connect Secure=9.1-r8.4
PulseSecure Pulse Connect Secure=9.1-r9
PulseSecure Pulse Connect Secure=9.1-r9.1
PulseSecure Pulse Connect Secure=9.1-r9.2
Ivanti Connect Secure=9.1
Ivanti Connect Secure=9.1-r1
Ivanti Connect Secure=9.1-r10.0
Ivanti Connect Secure=9.1-r10.2
Ivanti Connect Secure=9.1-r11.0
Ivanti Connect Secure=9.1-r11.1
Ivanti Connect Secure=9.1-r11.3
Ivanti Connect Secure=9.1-r11.4
Ivanti Connect Secure=9.1-r12
Ivanti Connect Secure=9.1-r2
Ivanti Connect Secure=9.1-r3
Ivanti Connect Secure=9.1-r4
Ivanti Connect Secure=9.1-r4.1
Ivanti Connect Secure=9.1-r4.2
Ivanti Connect Secure=9.1-r4.3
Ivanti Connect Secure=9.1-r5
Ivanti Connect Secure=9.1-r6
Ivanti Connect Secure=9.1-r7
Ivanti Connect Secure=9.1-r8
Ivanti Connect Secure=9.1-r8.1
Ivanti Connect Secure=9.1-r8.2
Ivanti Connect Secure=9.1-r8.4
Ivanti Connect Secure=9.1-r9
Ivanti Connect Secure=9.1-r9.1
Ivanti Connect Secure=9.1-r9.2
Event History
Nov 19, 2021
CVE Published
via MITRE·06:10 PM
Data Sourced
via MITRE·06:10 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-22965?
The severity of CVE-2021-22965 is high with a CVSS score of 7.5.
2
How does CVE-2021-22965 affect Pulse Connect Secure?
CVE-2021-22965 affects Pulse Connect Secure versions before 9.1R12.1.
3
What is the impact of CVE-2021-22965?
CVE-2021-22965 can allow an unauthenticated administrator to cause a denial of service when a malformed request is sent to the device.
4
How can I fix CVE-2021-22965?
To fix CVE-2021-22965, update to Pulse Connect Secure version 9.1R12.1 or higher.
5
Where can I find more information about CVE-2021-22965?
You can find more information about CVE-2021-22965 at https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB44879/?kA13Z000000L3ZF.