Login Request a demo
PP
Product
Pulse Policy Secure
by Pulsesecure · last CVE Oct 28, 2020
On CISA KEVExploited in the wildRansomware-linked
31
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities31In the news0Timeline
Severity mix
Critical 5High 13Medium 13Low 0
Severity
All severities31Critical5High13Medium13Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add Pulse Policy Secure to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-8218
In wildKEV
7.2
32%
Jul 30
Pulse Connect Secure Code Injection Vulnerability
Affected: through 9.0
CVE-2019-11539
RansomwareIn wildKEV
7.2
99%
Apr 26
Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability
Affected: 5.1r1.0; 5.1r1.1; 5.1r2.0; 5.1r2.1; 5.1r3.0; 5.1r3.2; +34 more
CVE-2018-20810
9.8
2%
Jun 28
Session data between cluster nodes during cluster synchronization is not properly encrypted in Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R2 and Pulse Policy Secure…
Affected: 5.4
CVE-2019-11540
9.8
8%
Apr 26
In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4 and 8.3RX before 8.3R7.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2 and 5.4RX before 5.4R7.1, an…
Affected: 5.4r1; 5.4r2; 5.4r2.1; 5.4r3; 5.4r4; 5.4r5; +11 more
CVE-2018-6320
9.8
4%
Sep 6
A vulnerability has been discovered in login.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.1RX before 8.1R12 and 8.3RX before 8.3R2 and Pulse Policy Secure (PPS) 5.2RX before…
Affected: 5.2r1.0; 5.2r2.0; 5.2r3.0; 5.2r3.2; 5.2r4.0; 5.2r5.0; +8 more
CVE-2018-5299
9.8
3%
Jan 16
A stack-based Buffer Overflow Vulnerability exists in the web server in Pulse Secure Pulse Connect Secure (PCS) before 8.3R4 and Pulse Policy Secure (PPS) before 5.4R4, leading to…
Affected: 5.4r1 through 5.4r3
CVE-2020-11580
9.1
1%
Apr 6
An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06
Affected: through 2020-04-06
CVE-2020-11582
8.8
1%
Apr 6
An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06
Affected: All versions, or not specified
CVE-2019-11509
8.8
8%
Jun 3
In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4 and Pulse Policy Secure (PPS) before 5.1R15.1, 5.2…
Affected: 5.2; 5.2; 5.2; 5.2; 5.2; 5.2; +20 more
CVE-2017-11455
8.8
1%
Aug 29
diag.cgi in Pulse Connect Secure 8.2R1 through 8.2R5, 8.1R1 through 8.1R10 and Pulse Policy Secure 5.3R1 through 5.3R5, 5.2R1 through 5.2R8, and 5.1R1 through 5.1R10 allow remote…
Affected: 5.1r1.0; 5.1r1.1; 5.1r2.0; 5.1r2.1; 5.1r3.0; 5.1r3.2; +31 more
CVE-2020-8206
8.1
3%
Jul 30
An improper authentication vulnerability exists in Pulse Connect Secure <9.1RB that allows an attacker with a users primary credentials to bypass the Google TOTP
Affected: through 9.0
CVE-2020-11581
8.1
10%
Apr 6
An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06
Affected: All versions, or not specified
CVE-2018-20809
7.5
3%
Jun 28
A crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R5 and Pulse Policy Secure 5.4RX before 5.4R5
Affected: 4.4; 4.4; 4.4; 4.4; 4.4; 4.4; +34 more
CVE-2019-11478
7.5
95%
Jun 19
Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective…
Affected: All versions, or not specified
CVE-2019-11477
7.5
99%
Jun 19
Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs)
Affected: All versions, or not specified
CVE-2020-15352
7.2
3%
Oct 27
An XML external entity (XXE) vulnerability in Pulse Connect Secure (PCS) before 9.1R9 and Pulse Policy Secure (PPS) before 9.1R9 allows remote authenticated admins to conduct…
Affected: through 9.0
CVE-2020-8219
7.2
2%
Jul 30
An insufficient permission check vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to change the password of a full administrator
Affected: through 9.0
CVE-2019-11542
7.2
66%
Apr 26
In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX…
Affected: 5.1r1.0; 5.1r1.1; 5.1r2.0; 5.1r2.1; 5.1r3.0; 5.1r3.2; +34 more
CVE-2020-8222
6.8
2%
Jul 30
A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 that allowed an authenticated attacker via the administrator web interface to perform an arbitrary file…
Affected: through 9.0
CVE-2020-8220
6.5
2%
Jul 30
A denial of service vulnerability exists in Pulse Connect Secure <9.1R8 that allows an authenticated attacker to perform command injection via the administrator web which can…
Affected: through 9.0
CVE-2020-8262
6.1
2%
Oct 28
A vulnerability in the Pulse Connect Secure / Pulse Policy Secure below 9.1R9 could allow attackers to conduct Cross-Site Scripting (XSS) and Open Redirection for authenticated…
Affected: before 9.1
CVE-2020-8238
6.1
2%
Sep 30
A vulnerability in the authenticated user web interface of Pulse Connect Secure and Pulse Policy Secure < 9.1R8.2 could allow attackers to conduct Cross-Site Scripting (XSS)
Affected: through 9.0
CVE-2020-8204
6.1
2%
Jul 30
A cross site scripting (XSS) vulnerability exists in Pulse Connect Secure <9.1R5 on the PSAL Page
Affected: through 9.0
CVE-2018-20814
6.1
2%
Jun 28
An XSS issue was found with Psaldownload.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.3R2 before 8.3R2 and Pulse Policy Secure (PPS) 5.4RX before 5.4R2
Affected: 5.4
CVE-2019-11543
6.1
3%
Apr 26
XSS exists in the admin web console in Pulse Secure Pulse Connect Secure (PCS) 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure 9.0RX…
Affected: 5.2r1.0; 5.2r2.0; 5.2r3.0; 5.2r3.2; 5.2r4.0; 5.2r5.0; +26 more
CVE-2018-14366
6.1
1%
Sep 6
download.cgi in Pulse Secure Pulse Connect Secure 8.1RX before 8.1R13 and 8.3RX before 8.3R4 and Pulse Policy Secure through 5.2RX before 5.2R10 and 5.4RX before 5.4R4 have an…
Affected: 5.2r1.0; 5.2r2.0; 5.2r3.0; 5.2r3.2; 5.2r4.0; 5.2r5.0; +12 more
CVE-2020-12880
5.5
0%
Jul 27
An issue was discovered in Pulse Policy Secure (PPS) and Pulse Connect Secure (PCS) Virtual Appliance before 9.1R8
Affected: through 9.0
CVE-2020-8217
5.4
1%
Jul 30
A cross site scripting (XSS) vulnerability in Pulse Connect Secure <9.1R8 allowed attackers to exploit in the URL used for Citrix ICA
Affected: through 9.0
CVE-2020-8221
4.9
2%
Jul 30
A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 which allows an authenticated attacker to read arbitrary files via the administrator web interface
Affected: through 9.0
CVE-2020-8261
4.3
2%
Oct 28
A vulnerability in the Pulse Connect Secure / Pulse Policy Secure < 9.1R9 is vulnerable to arbitrary cookie injection
Affected: before 9.1
CVE-2020-8216
4.3
2%
Jul 30
An information disclosure vulnerability in meeting of Pulse Connect Secure <9.1R8 allowed an authenticated end-users to find meeting details, if they know the Meeting ID
Affected: through 9.0
Showing 31