Skip to content
Noroxi

pulsesecure records

93 published records for vendor pulsesecure.

Researcher profile

Entered KEV
3 · 3.2%
Weaponized
5 · 5.4%
Pre-auth RCE
3
With a fix record
9.7%
Median publish → KEV
585 days

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

93 records
  • CVE-2019-11539
    88Now

    In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 an

    HighCVSS 7.2KEVWeaponizedEPSS 98%

    ivanti · connect secureApr 25, 2019

  • CVE-2020-8218
    68This week

    A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code e

    HighCVSS 7.2KEVWeaponizedEPSS 32%

    ivanti · connect secureJul 30, 2020

  • CVE-2021-22900
    62This week

    A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administra

    HighCVSS 7.2KEVWeaponizedEPSS 14%

    ivanti · connect secureMay 27, 2021

  • CVE-2019-11477
    60This week

    Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segs

    HighCVSS 7.5Proof of conceptEPSS 98%

    linux · linux kernelJun 18, 2019

  • CVE-2016-0800
    60This week

    The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify me

    MediumCVSS 5.9WeaponizedEPSS 82%

    openssl · opensslMar 1, 2016

  • CVE-2019-11478
    58Plan

    SACK can cause extensive memory use via fragmented resend queue

    HighCVSS 7.5No exploitEPSS 94%

    linux · linux kernelJun 18, 2019

  • CVE-2021-22908
    56Plan

    A buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to browse

    HighCVSS 8.8No exploitEPSS 69%

    ivanti · connect secureMay 27, 2021

  • CVE-2016-0799
    49Plan

    The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, whi

    CriticalCVSS 9.8No exploitEPSS 32%

    openssl · opensslMar 3, 2016

  • CVE-2019-11542
    48Plan

    In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 an

    HighCVSS 7.2No exploitEPSS 65%

    ivanti · connect secureApr 25, 2019

  • CVE-2019-11540
    41Plan

    In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4 and 8.3RX before 8.3R7.1 and Pulse Policy Secure version 9.0RX before 9.0R

    CriticalCVSS 9.8No exploitEPSS 7%

    ivanti · connect secureApr 25, 2019

  • CVE-2016-4787
    41Plan

    Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read sen

    CriticalCVSS 10.0No exploitEPSS 2%

    ivanti · connect secureMay 26, 2016

  • CVE-2018-6320
    40Plan

    A vulnerability has been discovered in login.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.1RX before 8.1R12 and 8.3RX before 8.3R2 and P

    CriticalCVSS 9.8No exploitEPSS 4%

    ivanti · connect secureSep 6, 2018

  • CVE-2018-5299
    40Plan

    A stack-based Buffer Overflow Vulnerability exists in the web server in Pulse Secure Pulse Connect Secure (PCS) before 8.3R4 and Pulse Polic

    CriticalCVSS 9.8No exploitEPSS 3%

    pulsesecure · pulse connect secureJan 16, 2018

  • CVE-2020-8239
    40Plan

    A vulnerability in the Pulse Secure Desktop Client < 9.1R9 is vulnerable to the client registry privilege escalation attack.

    CriticalCVSS 9.8No exploitEPSS 2%

    pulsesecure · pulse secure desktop clientOct 28, 2020

  • CVE-2018-20810
    40Plan

    Session data between cluster nodes during cluster synchronization is not properly encrypted in Pulse Secure Pulse Connect Secure (PCS) 8.3RX

    CriticalCVSS 9.8No exploitEPSS 1%

    ivanti · connect secureJun 28, 2019

  • CVE-2020-8956
    40Plan

    Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled.

    LowCVSS 3.3WeaponizedEPSS 1%

    pulsesecure · pulse secure desktopOct 27, 2020

  • CVE-2018-18284
    39Monitor

    Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving the 1Policy operator.

    HighCVSS 8.6No exploitEPSS 16%

    artifex · ghostscriptOct 19, 2018

  • CVE-2019-11509
    37Monitor

    In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4 and Pulse Policy

    HighCVSS 8.8No exploitEPSS 7%

    ivanti · connect secureJun 3, 2019

  • CVE-2020-8254
    36Monitor

    A vulnerability in the Pulse Secure Desktop Client < 9.1R9 has Remote Code Execution (RCE) if users can be convinced to connect to a malicio

    HighCVSS 8.8Proof of conceptEPSS 2%

    pulsesecure · pulse secure desktop clientOct 28, 2020

  • CVE-2020-11580
    36Monitor

    An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06.

    CriticalCVSS 9.1No exploitEPSS 1%

    pulsesecure · pulse connect secureApr 6, 2020

  • CVE-2022-21826
    35Monitor

    Pulse Secure version 9.115 and below may be susceptible to client-side http request smuggling, When the application receives a POST request,

    MediumCVSS 5.4No exploitEPSS 46%

    ivanti · connect secureSep 30, 2022

  • CVE-2020-11581
    35Monitor

    An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06.

    HighCVSS 8.1No exploitEPSS 9%

    pulsesecure · pulse connect secureApr 6, 2020

  • CVE-2016-4791
    35Monitor

    The administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.

    HighCVSS 8.6No exploitEPSS 2%

    ivanti · connect secureMay 26, 2016

  • CVE-2017-11455
    35Monitor

    diag.cgi in Pulse Connect Secure 8.2R1 through 8.2R5, 8.1R1 through 8.1R10 and Pulse Policy Secure 5.3R1 through 5.3R5, 5.2R1 through 5.2R8,

    HighCVSS 8.8No exploitEPSS 1%

    ivanti · connect secureAug 29, 2017

  • CVE-2018-20193
    35Monitor

    Certain Secure Access SA Series SSL VPN products (originally developed by Juniper Networks but now sold and supported by Pulse Secure, LLC)

    HighCVSS 8.8No exploitEPSS 1%

    pulsesecure · secure access series ssl vpn sa-4000Dec 21, 2018