8.8 Élevée Exploitée

CVE-2021-22894 Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability

Exploitation active constatée

· catalogue CISA KEV

Action attendue Apply updates per vendor instructions.

Campagnes de rançongiciel Non constatée à ce jour

Faiblesse CWE-94

Description

A buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to execute arbitrary code as the root user via maliciously crafted meeting room.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Pulse Connect Secure	Versions non publiées

Références

kb.pulsesecure.net kb.pulsesecure.net

Chronologie

Publiée 27 mai 2021
Ajoutée au catalogue KEV 3 novembre 2021
Dernière modification 21 octobre 2025

Les 21 CVE de Pulse Connect Secure →

CVE-2021-22965 A vulnerability in Pulse Connect Secure before 9.1R12.1 could allow an unauthenticated administrator to causes a… Non notée CVE-2021-22937 A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform a file write… Non notée CVE-2021-22936 A vulnerability in Pulse Connect Secure before 9.1R12 could allow a threat actor to perform a cross-site script attack… Non notée CVE-2021-22935 A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command… Non notée

Suivre cette CVE