Pulse Policy Secure vulnerabilities

2 known vulnerabilities in Pulse Policy Secure from Pulsesecure. 2 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Pulse Connect Secure Code Injection Exploited

  CVE-2020-8218Jul 30, 2020Pulse Connect SecureEPSS 32.3%

  A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.

• 7.2 High severity

  Ivanti Pulse Connect Secure and Policy Secure Command Injection Exploited

  CVE-2019-11539Apr 26, 2019IvantiEPSS 98.5%

  In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1,