PS
Product
Pulse Secure Desktop Client
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 10Medium 7Low 0
Watch
Add Pulse Secure Desktop Client to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-8254 | 8.8 | Oct 28 | A vulnerability in the Pulse Secure Desktop Client < 9.1R9 has Remote Code Execution (RCE) if users can be convinced to connect to a malicious server Affected: before 9.1; 9.1; 9.1; 9.1; 9.1; 9.1; +8 more |
| CVE-2019-11213 | 8.1 | Apr 12 | In Pulse Secure Pulse Desktop Client and Network Connect, an attacker could access session tokens to replay and spoof sessions, and as a result, gain unauthorized access as an end… Affected: 5.0r1.0 before 5.3r7; 9.0r1 before 9.0r3 |
| CVE-2020-8250 | 7.8 | Oct 28 | A vulnerability in the Pulse Secure Desktop Client (Linux) < 9.1R9 could allow local attackers to escalate privilege Affected: before 9.1; 9.1; 9.1; 9.1; 9.1; 9.1; +9 more |
| CVE-2020-8249 | 7.8 | Oct 28 | A vulnerability in the Pulse Secure Desktop Client (Linux) < 9.1R9 could allow local attackers to perform buffer overflow Affected: before 9.1; 9.1; 9.1; 9.1; 9.1; 9.1; +8 more |
| CVE-2020-8248 | 7.8 | Oct 28 | A vulnerability in the Pulse Secure Desktop Client (Linux) < 9.1R9 could allow local attackers to escalate privilege Affected: before 9.1; 9.1; 9.1; 9.1; 9.1; 9.1; +8 more |
| CVE-2020-8240 | 7.8 | Oct 28 | A vulnerability in the Pulse Secure Desktop Client < 9.1R9 allows a restricted user on an endpoint machine can use system-level privileges if the Embedded Browser is configured… Affected: before 9.1; 9.1; 9.1; 9.1; 9.1; 9.1; +8 more |
| CVE-2018-15865 | 7.8 | Sep 6 | The Pulse Secure Desktop (macOS) has a Privilege Escalation Vulnerability Affected: 5.1r1.0; 5.1r1.1; 5.1r2.0; 5.1r3.0; 5.1r3.1; 5.1r3.2; +19 more |
| CVE-2020-8241 | 7.5 | Oct 28 | A vulnerability in the Pulse Secure Desktop Client < 9.1R9 could allow the attacker to perform a MITM Attack if end users are convinced to connect to a malicious server Affected: before 9.1; 9.1; 9.1; 9.1; 9.1; 9.1; +8 more |
| CVE-2018-20812 | 7.5 | Jun 28 | An information exposure issue where IPv6 DNS traffic would be sent outside of the VPN tunnel (when Traffic Enforcement was enabled) exists in Pulse Secure Pulse Secure Desktop… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +34 more |
| CVE-2020-13162 | 7.0 | Jun 16 | A time-of-check time-of-use vulnerability in PulseSecureService.exe in Pulse Secure Client versions prior to 9.1.6 down to 5.3 R70 for Windows (which runs as NT AUTHORITY/SYSTEM)… Affected: 5.3; 5.3; 5.3; 5.3; 5.3; 5.3; +23 more |
Showing 10