PC
Product
Pulse Connect Secure
On CISA KEVExploited in the wild
57
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 27Medium 25Low 0
Watch
Add Pulse Connect Secure to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-8222 | 6.8 | Jul 30 | A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 that allowed an authenticated attacker via the administrator web interface to perform an arbitrary file… Affected: through 9.0 |
| CVE-2021-22933 | 6.5 | Aug 16 | A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform an arbitrary file delete via a maliciously crafted web request Affected: before 9.1 |
| CVE-2020-8220 | 6.5 | Jul 30 | A denial of service vulnerability exists in Pulse Connect Secure <9.1R8 that allows an authenticated attacker to perform command injection via the administrator web which can… Affected: through 9.0 |
| CVE-2016-3985 | 6.5 | Apr 12 | The Terminal Services Remote Desktop Protocol (RDP) client session restrictions feature in Pulse Connect Secure (aka PCS) 8.1R7 and 8.2R1 allow remote authenticated users to… Affected: 8.1r7; 8.2r1 |
| CVE-2021-22936 | 6.1 | Aug 16 | A vulnerability in Pulse Connect Secure before 9.1R12 could allow a threat actor to perform a cross-site script attack against an authenticated administrator via an unsanitized… Affected: before 9.1 |
| CVE-2020-8262 | 6.1 | Oct 28 | A vulnerability in the Pulse Connect Secure / Pulse Policy Secure below 9.1R9 could allow attackers to conduct Cross-Site Scripting (XSS) and Open Redirection for authenticated… Affected: before 9.1 |
| CVE-2020-8238 | 6.1 | Sep 30 | A vulnerability in the authenticated user web interface of Pulse Connect Secure and Pulse Policy Secure < 9.1R8.2 could allow attackers to conduct Cross-Site Scripting (XSS) Affected: through 9.0 |
| CVE-2020-8204 | 6.1 | Jul 30 | A cross site scripting (XSS) vulnerability exists in Pulse Connect Secure <9.1R5 on the PSAL Page Affected: through 9.0 |
| CVE-2019-11543 | 6.1 | Apr 26 | XSS exists in the admin web console in Pulse Secure Pulse Connect Secure (PCS) 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure 9.0RX… Affected: 8.1r1.0; 8.1rx; 8.3rx; 9.0r1; 9.0r2; 9.0r2.1; +4 more |
| CVE-2018-14366 | 6.1 | Sep 6 | download.cgi in Pulse Secure Pulse Connect Secure 8.1RX before 8.1R13 and 8.3RX before 8.3R4 and Pulse Policy Secure through 5.2RX before 5.2R10 and 5.4RX before 5.4R4 have an… Affected: 8.1r1.0; 8.1rx; 8.3rx |
| CVE-2017-11195 | 6.1 | Jul 12 | Pulse Connect Secure 8.3R1 has Reflected XSS in launchHelp.cgi Affected: 8.3r1.0 |
| CVE-2017-11194 | 6.1 | Jul 12 | Pulse Connect Secure 8.3R1 has Reflected XSS in adminservercacertdetails.cgi Affected: 8.3r1.0 |
| CVE-2016-4789 | 6.1 | May 26 | Cross-site scripting (XSS) vulnerability in the system configuration section in the administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2,… Affected: 8.1r1.0; 7.4 |
| CVE-2016-4788 | 5.8 | May 26 | Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read an unspecified system file via unknown… Affected: 8.1r1.0; 7.4 |
| CVE-2020-12880 | 5.5 | Jul 27 | An issue was discovered in Pulse Policy Secure (PPS) and Pulse Connect Secure (PCS) Virtual Appliance before 9.1R8 Affected: through 9.0 |
| CVE-2018-9849 | 5.5 | May 10 | Pulse Secure Pulse Connect Secure 8.1.x before 8.1R14, 8.2.x before 8.2R11, and 8.3.x before 8.3R5 do not properly process nested XML entities, which allows remote attackers to… Affected: 8.1 before 8.1r14; 8.2 before 8.2r11; 8.3 before 8.3r5 |
| CVE-2016-4790 | 5.5 | May 26 | Cross-site scripting (XSS) vulnerability in the administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before… Affected: 8.1r1.0; 7.4 |
| CVE-2022-21826 | 5.4 | Sep 30 | Pulse Secure version 9.115 and below may be susceptible to client-side http request smuggling, When the application receives a POST request, it ignores the request's… Affected: before 9.1 |
| CVE-2020-8217 | 5.4 | Jul 30 | A cross site scripting (XSS) vulnerability in Pulse Connect Secure <9.1R8 allowed attackers to exploit in the URL used for Citrix ICA Affected: through 9.0 |
| CVE-2020-8256 | 4.9 | Sep 30 | A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to gain arbitrary file reading access through Pulse Collaboration… Affected: through 9.0 |
| CVE-2020-8221 | 4.9 | Jul 30 | A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 which allows an authenticated attacker to read arbitrary files via the administrator web interface Affected: through 9.0 |
| CVE-2017-17947 | 4.8 | Jan 16 | A cross site scripting issue has been found in custompage.cgi in Pulse Secure Pulse Connect Secure (PCS) before 8.0R17.0, 8.1.x before 8.1R13, 8.2.x before 8.2R9, and 8.3.x before… Affected: before 8.0r17.0; 8.1 before 8.1r13; 8.2 through 8.2r9; 8.3 before 8.3r3 |
| CVE-2020-15408 | 4.6 | Jul 28 | An issue was discovered in Pulse Secure Pulse Connect Secure before 9.1R8 Affected: through 9.1 |
| CVE-2020-8261 | 4.3 | Oct 28 | A vulnerability in the Pulse Connect Secure / Pulse Policy Secure < 9.1R9 is vulnerable to arbitrary cookie injection Affected: before 9.1 |
| CVE-2020-8216 | 4.3 | Jul 30 | An information disclosure vulnerability in meeting of Pulse Connect Secure <9.1R8 allowed an authenticated end-users to find meeting details, if they know the Meeting ID Affected: through 9.0 |
Showing 25