Vulnerabilidades de Pulsesecure
CVEs publicadas que afetam produtos de Pulsesecure: 3 registro(s), com severidade, exploração e correções.
CVE-2021-22900
Alta · 7.2
KEV Alta · 55 CWE-669 27/05/2021
Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability
A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.
CVE-2020-8218
Alta · 7.2
KEV Alta · 56 CWE-94 30/07/2020
Pulse Connect Secure Code Injection Vulnerability
A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.
CVE-2019-11539
Alta · 7.2
KEV Urgente · 86 Exploit público Ransomware CWE-78 25/04/2019
Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability
In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.