cve.bz

CVE-2021-31922

7.5 highEPSS 1.0%

High (7.5) in pulsesecure virtual traffic manager. EPSS 1.0% chance of exploitation in the next 30 days.

An HTTP Request Smuggling vulnerability in Pulse Secure Virtual Traffic Manager before 21.1 could allow an attacker to smuggle an HTTP request through an HTTP/2 Header. This vulnerability is resolved in 21.1, 20.3R1, 20.2R1, 20.1R2, 19.2R4, and 18.2R3.

Severity

CVSS 3.1

7.5 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-11-01)
CWE
CWE-444
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON