PP
Product
Pulse Policy Secure
On CISA KEVExploited in the wildRansomware-linked
31
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 13Medium 13Low 0
Watch
Add Pulse Policy Secure to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-8218 In wildKEV | 7.2 | Jul 30 | Pulse Connect Secure Code Injection Vulnerability Affected: through 9.0 |
| CVE-2019-11539 RansomwareIn wildKEV | 7.2 | Apr 26 | Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability Affected: 5.1r1.0; 5.1r1.1; 5.1r2.0; 5.1r2.1; 5.1r3.0; 5.1r3.2; +34 more |
| CVE-2020-11582 | 8.8 | Apr 6 | An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06 Affected: All versions, or not specified |
| CVE-2019-11509 | 8.8 | Jun 3 | In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4 and Pulse Policy Secure (PPS) before 5.1R15.1, 5.2… Affected: 5.2; 5.2; 5.2; 5.2; 5.2; 5.2; +20 more |
| CVE-2017-11455 | 8.8 | Aug 29 | diag.cgi in Pulse Connect Secure 8.2R1 through 8.2R5, 8.1R1 through 8.1R10 and Pulse Policy Secure 5.3R1 through 5.3R5, 5.2R1 through 5.2R8, and 5.1R1 through 5.1R10 allow remote… Affected: 5.1r1.0; 5.1r1.1; 5.1r2.0; 5.1r2.1; 5.1r3.0; 5.1r3.2; +31 more |
| CVE-2020-8206 | 8.1 | Jul 30 | An improper authentication vulnerability exists in Pulse Connect Secure <9.1RB that allows an attacker with a users primary credentials to bypass the Google TOTP Affected: through 9.0 |
| CVE-2020-11581 | 8.1 | Apr 6 | An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06 Affected: All versions, or not specified |
| CVE-2018-20809 | 7.5 | Jun 28 | A crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R5 and Pulse Policy Secure 5.4RX before 5.4R5 Affected: 4.4; 4.4; 4.4; 4.4; 4.4; 4.4; +34 more |
| CVE-2019-11478 | 7.5 | Jun 19 | Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective… Affected: All versions, or not specified |
| CVE-2019-11477 | 7.5 | Jun 19 | Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs) Affected: All versions, or not specified |
| CVE-2020-15352 | 7.2 | Oct 27 | An XML external entity (XXE) vulnerability in Pulse Connect Secure (PCS) before 9.1R9 and Pulse Policy Secure (PPS) before 9.1R9 allows remote authenticated admins to conduct… Affected: through 9.0 |
| CVE-2020-8219 | 7.2 | Jul 30 | An insufficient permission check vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to change the password of a full administrator Affected: through 9.0 |
| CVE-2019-11542 | 7.2 | Apr 26 | In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX… Affected: 5.1r1.0; 5.1r1.1; 5.1r2.0; 5.1r2.1; 5.1r3.0; 5.1r3.2; +34 more |
Showing 13