Skip to main content

Pulse Connect Secure vulnerabilities

2 published alerts for Ivanti Pulse Connect Secure.

Actively exploited (KEV)Ransomware

CVE-2021-22893

Ivanti Pulse Connect Secure Use-After-Free Vulnerability

Ivanti Pulse Connect Secure is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-22893). Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via license services. CISA remediation due date: 2022-05-03. If you need help checking exposure, call (864) 335-9223.

Actively exploited (KEV)Ransomware

CVE-2019-11510

Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability

Ivanti Pulse Connect Secure is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2019-11510). Ivanti Pulse Connect Secure contains an arbitrary file read vulnerability that allows an unauthenticated remote attacker with network access via HTTPS to send a specially crafted URI. CISA remediation due date: 2022-05-03. If you need help checking exposure, call (864) 335-9223.