PC
Product
Pulse Connect Secure
On CISA KEVExploited in the wild
57
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 27Medium 25Low 0
Watch
Add Pulse Connect Secure to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-8217 | 5.4 | Jul 30 | A cross site scripting (XSS) vulnerability in Pulse Connect Secure <9.1R8 allowed attackers to exploit in the URL used for Citrix ICA Affected: through 9.0 |
| CVE-2020-8256 | 4.9 | Sep 30 | A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to gain arbitrary file reading access through Pulse Collaboration… Affected: through 9.0 |
| CVE-2020-8221 | 4.9 | Jul 30 | A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 which allows an authenticated attacker to read arbitrary files via the administrator web interface Affected: through 9.0 |
| CVE-2017-17947 | 4.8 | Jan 16 | A cross site scripting issue has been found in custompage.cgi in Pulse Secure Pulse Connect Secure (PCS) before 8.0R17.0, 8.1.x before 8.1R13, 8.2.x before 8.2R9, and 8.3.x before… Affected: before 8.0r17.0; 8.1 before 8.1r13; 8.2 through 8.2r9; 8.3 before 8.3r3 |
| CVE-2020-15408 | 4.6 | Jul 28 | An issue was discovered in Pulse Secure Pulse Connect Secure before 9.1R8 Affected: through 9.1 |
| CVE-2020-8261 | 4.3 | Oct 28 | A vulnerability in the Pulse Connect Secure / Pulse Policy Secure < 9.1R9 is vulnerable to arbitrary cookie injection Affected: before 9.1 |
| CVE-2020-8216 | 4.3 | Jul 30 | An information disclosure vulnerability in meeting of Pulse Connect Secure <9.1R8 allowed an authenticated end-users to find meeting details, if they know the Meeting ID Affected: through 9.0 |