PP
Product
Pulse Policy Secure
On CISA KEVExploited in the wildRansomware-linked
31
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 13Medium 13Low 0
Watch
Add Pulse Policy Secure to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-8222 | 6.8 | Jul 30 | A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 that allowed an authenticated attacker via the administrator web interface to perform an arbitrary file… Affected: through 9.0 |
| CVE-2020-8220 | 6.5 | Jul 30 | A denial of service vulnerability exists in Pulse Connect Secure <9.1R8 that allows an authenticated attacker to perform command injection via the administrator web which can… Affected: through 9.0 |
| CVE-2020-8262 | 6.1 | Oct 28 | A vulnerability in the Pulse Connect Secure / Pulse Policy Secure below 9.1R9 could allow attackers to conduct Cross-Site Scripting (XSS) and Open Redirection for authenticated… Affected: before 9.1 |
| CVE-2020-8238 | 6.1 | Sep 30 | A vulnerability in the authenticated user web interface of Pulse Connect Secure and Pulse Policy Secure < 9.1R8.2 could allow attackers to conduct Cross-Site Scripting (XSS) Affected: through 9.0 |
| CVE-2020-8204 | 6.1 | Jul 30 | A cross site scripting (XSS) vulnerability exists in Pulse Connect Secure <9.1R5 on the PSAL Page Affected: through 9.0 |
| CVE-2018-20814 | 6.1 | Jun 28 | An XSS issue was found with Psaldownload.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.3R2 before 8.3R2 and Pulse Policy Secure (PPS) 5.4RX before 5.4R2 Affected: 5.4 |
| CVE-2019-11543 | 6.1 | Apr 26 | XSS exists in the admin web console in Pulse Secure Pulse Connect Secure (PCS) 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure 9.0RX… Affected: 5.2r1.0; 5.2r2.0; 5.2r3.0; 5.2r3.2; 5.2r4.0; 5.2r5.0; +26 more |
| CVE-2018-14366 | 6.1 | Sep 6 | download.cgi in Pulse Secure Pulse Connect Secure 8.1RX before 8.1R13 and 8.3RX before 8.3R4 and Pulse Policy Secure through 5.2RX before 5.2R10 and 5.4RX before 5.4R4 have an… Affected: 5.2r1.0; 5.2r2.0; 5.2r3.0; 5.2r3.2; 5.2r4.0; 5.2r5.0; +12 more |
| CVE-2020-12880 | 5.5 | Jul 27 | An issue was discovered in Pulse Policy Secure (PPS) and Pulse Connect Secure (PCS) Virtual Appliance before 9.1R8 Affected: through 9.0 |
| CVE-2020-8217 | 5.4 | Jul 30 | A cross site scripting (XSS) vulnerability in Pulse Connect Secure <9.1R8 allowed attackers to exploit in the URL used for Citrix ICA Affected: through 9.0 |
| CVE-2020-8221 | 4.9 | Jul 30 | A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 which allows an authenticated attacker to read arbitrary files via the administrator web interface Affected: through 9.0 |
| CVE-2020-8261 | 4.3 | Oct 28 | A vulnerability in the Pulse Connect Secure / Pulse Policy Secure < 9.1R9 is vulnerable to arbitrary cookie injection Affected: before 9.1 |
| CVE-2020-8216 | 4.3 | Jul 30 | An information disclosure vulnerability in meeting of Pulse Connect Secure <9.1R8 allowed an authenticated end-users to find meeting details, if they know the Meeting ID Affected: through 9.0 |
Showing 13