onyx

onyx --cves cve-2021-22900

CVE-2021-22900

HIGHKEVPulse Secure
score
<0.1
cvss
7.2
epss
14.1%
published
2021-05-27
kev added
2021-11-03
first seen

Pulse Connect Secure < 9.1R11.4 contains multiple unrestricted upload vulnerabilities caused by improper validation in the web interface, letting authenticated administrators perform arbitrary file writes via crafted archive uploads.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2021-05-27 — PublishedP2021-11-03 — Added to CISA KEVK2026-10-21 — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 14.1%2026-09-23: epss 14.1%2026-09-24: epss 14.1%2026-09-25: epss 14.1%2026-09-26: epss 14.1%2026-09-27: epss 14.1%2026-09-28: epss 14.1%2026-09-29: epss 14.1%2026-09-30: epss 14.1%2026-10-01: epss 14.1%2026-10-02: epss 14.1%2026-10-03: epss 14.1%2026-10-04: epss 14.1%2026-10-05: epss 14.1%2026-10-06: epss 14.1%2026-10-07: epss 14.1%2026-10-08: epss 14.1%2026-10-09: epss 14.1%2026-10-10: epss 14.1%2026-10-11: epss 14.1%2026-10-12: epss 14.1%2026-10-13: epss 14.1%2026-10-14: epss 14.1%2026-10-15: epss 14.1%2026-10-16: epss 14.1%2026-10-18: epss 14.1%2026-10-19: epss 14.1%2026-10-20: epss 14.1%2026-10-21: epss 14.1%14.1%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Added to CISA KEV
  3. Tracked by Onyx

Weaknesses

CWE-94 CWE-669

References 2