CVE-2021-22900VulnerabilityPublished 11/03/2021Updated 10/24/2026

CVE-2021-22900: Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability

Affects Ivanti Pulse Connect SecureSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 11/03/2021
KEV deadline: 05/03/2022
EPSS: 14.1% chance of exploitation in 30 days – higher than 96% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

Description

Ivanti Pulse Connect Secure contains an unrestricted file upload vulnerability (CVE-2021-22900) that allows an authenticated administrator to upload maliciously crafted archives via the administrator web interface, resulting in arbitrary file writes. This vulnerability has been exploited in the wild and is considered high severity.

Summary

CVE-2021-22900 is an unrestricted file upload vulnerability in Ivanti Pulse Connect Secure. It allows an authenticated administrator to perform arbitrary file writes by uploading maliciously crafted archive files through the administrator web interface. This flaw can lead to unauthorized code execution or system compromise. The vulnerability has been observed exploited in the wild, indicating active threat actor interest.

Impact

Successful exploitation enables an authenticated administrator to write arbitrary files on the system, potentially leading to remote code execution or full system compromise. Given that the vulnerability requires administrator authentication, the impact is significant in environments where such credentials are compromised or misused.

Mitigation

No patch or official remediation details are provided in the available data. Organizations should monitor vendor advisories for updates and consider restricting administrator access and auditing administrator activities to mitigate risk until a fix is available.

Weaknesses

CWE-94Code Injection (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 08:56:40 UTC

Weaknesses

References

Related threats