Pulse Connect Secure
21 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2021-22965 | Fixed in 9.1R12.1 | A vulnerability in Pulse Connect Secure before 9.1R12.1 could allow an unauthenticated administrator to causes a denial of service when a ma | HIGH 7.5 | 2.2 % | ||
| CVE-2021-22937 | Fixed in 9.1R12 | A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform a file write via a maliciously c | HIGH 7.2 | 7.8 % | ||
| CVE-2021-22936 | Fixed in 9.1R12 | A vulnerability in Pulse Connect Secure before 9.1R12 could allow a threat actor to perform a cross-site script attack against an authentica | MEDIUM 6.1 | 0.8 % | ||
| CVE-2021-22935 | Fixed in 9.1R12 | A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command injection via an unsanit | HIGH 7.2 | 2.1 % | ||
| CVE-2021-22934 | Fixed in 9.1R12 | A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator or compromised Pulse Connect Secure device | HIGH 7.2 | 4.7 % | ||
| CVE-2021-22938 | Fixed in 9.1R12 | A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command injection via an unsanit | HIGH 7.2 | 2.1 % | ||
| CVE-2021-22933 | Fixed in 9.1R12 | A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform an arbitrary file delete via a m | MEDIUM 6.5 | 1.4 % | ||
| CVE-2021-22899 | Fixed in 9.1R11.4 | A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote co | HIGH 8.8 | 23 % | KEV | |
| CVE-2021-22894 | Fixed version 9.1R11.4 | A buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to execute arbitrary c | HIGH 8.8 | 41 % | KEV | |
| CVE-2021-22908 | Fixed in 9.1R11.5 | A buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to browse | HIGH 8.8 | 69 % | ||
| CVE-2021-22893 | PCS 9.0R3 or above, PCS 9.1R1 and above | Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browse | CRITICAL 10.0 | 47 % | KEV | |
| CVE-2020-8256 | Fixed in 9.1R8.2 | A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to gain arbitrary file readi | MEDIUM 4.9 | 3.4 % | ||
| CVE-2020-8222 | Fixed in 9.1R8 | A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 that allowed an authenticated attacker via the administrator web interf | MEDIUM 6.8 | 2.3 % | ||
| CVE-2020-8221 | Fixed in | A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 which allows an authenticated attacker to read arbitrary files via the | MEDIUM 4.9 | 2.3 % | ||
| CVE-2020-8220 | Fixed in 9.1R8 | A denial of service vulnerability exists in Pulse Connect Secure <9.1R8 that allows an authenticated attacker to perform command injection v | MEDIUM 6.5 | 2.5 % | ||
| CVE-2020-8219 | Fixed in 9.1R8 | An insufficient permission check vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to change the password of a ful | HIGH 7.2 | 2.2 % | ||
| CVE-2020-8218 | Fixed in 9.1R8 | A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code e | HIGH 7.2 | 32 % | KEV | |
| CVE-2020-8217 | Fixed in 9.1R8 | A cross site scripting (XSS) vulnerability in Pulse Connect Secure <9.1R8 allowed attackers to exploit in the URL used for Citrix ICA. | MEDIUM 5.4 | 1.4 % | ||
| CVE-2020-8216 | Fixed in 9.1R8 | An information disclosure vulnerability in meeting of Pulse Connect Secure <9.1R8 allowed an authenticated end-users to find meeting details | MEDIUM 4.3 | 2.3 % | ||
| CVE-2020-8206 | Fixed in 9.1R8 | An improper authentication vulnerability exists in Pulse Connect Secure <9.1RB that allows an attacker with a users primary credentials to b | HIGH 8.1 | 3.0 % | ||
| CVE-2020-8204 | Fixed in 9.1R5 | A cross site scripting (XSS) vulnerability exists in Pulse Connect Secure <9.1R5 on the PSAL Page. | MEDIUM 6.1 | 1.8 % |