Pulsesecure Pulse Policy Secure vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Pulsesecure Pulse Policy Secure: 2 record(s), with affected versions and fixes.
cpe:2.3:a:pulsesecure:pulse_policy_secure

CVE-2020-8218 High · 7.2 KEV High · 62 Public exploit CWE-94 Jul 30, 2020

Pulse Connect Secure Code Injection Vulnerability

A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.

CVE-2019-11539 High · 7.2 KEV Urgent · 86 Public exploit Ransomware CWE-78 Apr 25, 2019

Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.