Ivanti Connect Secure 9.0 R3.0
Approved changes feed: RSS · Atom
cpe:2.3:a:ivanti:connect_secure:9.0:r3.0:*:*:*:*:*:*
part: a version: 9.0 update: r3.0
| Vendor | Ivanti (40b984ad-e54c-5e1b-9aa1-2a4cd4d61129) |
|---|---|
| Product | Connect Secure (61f5b622-21c4-5d14-b120-bd5f32132cfb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-22908 |
vulnerable | 2026-06-03 14:43:54.250758 |
Details available
A buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to browse SMB shares to execute arbitrary code as the root user. As of version 9.1R3, this permission is not enabled by default.
Published: 2021-05-27T11:14:24.000Z
Updated: 2024-08-03T18:58:25.474Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22900 |
vulnerable | 2026-06-03 14:43:54.230444 |
Details available
A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.
Published: 2021-05-27T11:15:27.000Z
Updated: 2025-10-21T23:25:44.296Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22899 |
vulnerable | 2026-06-03 14:43:54.219074 |
Details available
A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature
Published: 2021-05-27T11:15:22.000Z
Updated: 2025-10-21T23:25:44.693Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22894 |
vulnerable | 2026-06-03 14:43:54.201127 |
Details available
A buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to execute arbitrary code as the root user via maliciously crafted meeting room.
Published: 2021-05-27T11:15:11.000Z
Updated: 2025-10-21T23:25:44.830Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.