High severity · published Oct 27, 2020
CVE-2020-15352
An XML external entity (XXE) vulnerability in Pulse Connect Secure (PCS) before 9.1R9 and Pulse Policy Secure (PPS) before 9.1R9 allows remote authenticated admins to conduct…
7.2
CVSS
3.2%
EPSS
No
On KEV
Description
An XML external entity (XXE) vulnerability in Pulse Connect Secure (PCS) before 9.1R9 and Pulse Policy Secure (PPS) before 9.1R9 allows remote authenticated admins to conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.2% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Connect Secure · Ivanti
9.1; 9.1; 9.1; 9.1; 9.1; 9.1; +8 more · source: NVD
PS
Policy Secure · Ivanti
9.1; 9.1; 9.1; 9.1; 9.1; 9.1; +5 more · source: NVD
PC
Pulse Connect Secure · Pulsesecure
through 9.0 · source: NVD
PP
Pulse Policy Secure · Pulsesecure
through 9.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-15352
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-15352
Vendor Advisory
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601
More from Connect Secure
10.0
CVE-2021-22893
Ivanti Pulse Connect Secure Use-After-Free Vulnerability
10.0
CVE-2019-11510
Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability
9.8
CVE-2025-22457
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
9.1
CVE-2024-21887
Ivanti Connect Secure and Policy Secure Command Injection Vulnerability
9.0
CVE-2025-0282
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability