onyx

onyx --cves cve-2021-22894

CVE-2021-22894

HIGHKEVPulse Secure
score
<0.1
cvss
8.8
epss
41.3%
published
2021-05-27
kev added
2021-11-03
first seen

Pulse Connect Secure < 9.1R11.4 contains a buffer overflow caused by maliciously crafted meeting room, letting remote authenticated attackers execute arbitrary code as root, exploit requires attacker to be authenticated.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2021-05-27 — PublishedP2021-11-03 — Added to CISA KEVK2026-10-21 — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 41.3%2026-09-23: epss 41.3%2026-09-24: epss 41.3%2026-09-25: epss 41.3%2026-09-26: epss 41.3%2026-09-27: epss 41.3%2026-09-28: epss 41.3%2026-09-29: epss 41.3%2026-09-30: epss 41.3%2026-10-01: epss 41.3%2026-10-02: epss 41.3%2026-10-03: epss 41.3%2026-10-04: epss 41.3%2026-10-05: epss 41.3%2026-10-06: epss 41.3%2026-10-07: epss 41.3%2026-10-08: epss 41.3%2026-10-09: epss 41.3%2026-10-10: epss 41.3%2026-10-11: epss 41.3%2026-10-12: epss 41.3%2026-10-13: epss 41.3%2026-10-14: epss 41.3%2026-10-15: epss 41.3%2026-10-16: epss 41.3%2026-10-18: epss 41.3%2026-10-19: epss 41.3%2026-10-20: epss 41.3%2026-10-21: epss 41.3%41.3%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Added to CISA KEV
  3. Tracked by Onyx

Weaknesses

CWE-94 CWE-119

References 2