Pulsesecure vulnerabilities
We track 4 vulnerabilities in Pulsesecure products across 3 products. 4 are rated high or critical, and 3 have been exploited in real attacks. The most recent was published on May 3, 2024.
Latest Pulsesecure vulnerabilities
- 7.8 High severity
Client: Improper Limitation of a Pathname to a Restricted Directory
Pulse Secure Client SetupService Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Pulse Secure Client. An attacker must first obtain the ability to execu
- 7.2 High severity
Ivanti Pulse Connect Secure Unrestricted File Upload Exploited
A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.
- 7.2 High severity
Pulse Connect Secure Code Injection Exploited
A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.
- 7.2 High severity
Ivanti Pulse Connect Secure and Policy Secure Command Injection Exploited
In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1,