7.5

CVE-2018-20809

A crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R5 and Pulse Policy Secure 5.4RX before 5.4R5. This is not applicable to PCS 8.1RX.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ivanti ≫ Connect Secure Version 8.3 Update r1
Ivanti ≫ Connect Secure Version 8.3 Update r2
Ivanti ≫ Connect Secure Version 8.3 Update r2.1
Ivanti ≫ Connect Secure Version 8.3 Update r3
Ivanti ≫ Connect Secure Version 8.3 Update r4
Pulsesecure ≫ Pulse Policy Secure Version 4.4 Update r1.0
Pulsesecure ≫ Pulse Policy Secure Version 4.4 Update r1.1
Pulsesecure ≫ Pulse Policy Secure Version 4.4 Update r10
Pulsesecure ≫ Pulse Policy Secure Version 4.4 Update r11.1
Pulsesecure ≫ Pulse Policy Secure Version 4.4 Update r12.0
Pulsesecure ≫ Pulse Policy Secure Version 4.4 Update r13.1
Pulsesecure ≫ Pulse Policy Secure Version 4.4 Update r13.2
Pulsesecure ≫ Pulse Policy Secure Version 4.4 Update r13.3
Pulsesecure ≫ Pulse Policy Secure Version 4.4 Update r130
Pulsesecure ≫ Pulse Policy Secure Version 4.4 Update r2.0
Pulsesecure ≫ Pulse Policy Secure Version 4.4 Update r3.0
Pulsesecure ≫ Pulse Policy Secure Version 4.4 Update r4.0
Pulsesecure ≫ Pulse Policy Secure Version 4.4 Update r5.0
Pulsesecure ≫ Pulse Policy Secure Version 4.4 Update r6.0
Pulsesecure ≫ Pulse Policy Secure Version 4.4 Update r7.0
Pulsesecure ≫ Pulse Policy Secure Version 4.4 Update r8.0
Pulsesecure ≫ Pulse Policy Secure Version 5.0 Update r1.0
Pulsesecure ≫ Pulse Policy Secure Version 5.0 Update r10.0
Pulsesecure ≫ Pulse Policy Secure Version 5.0 Update r11.0
Pulsesecure ≫ Pulse Policy Secure Version 5.0 Update r12.1
Pulsesecure ≫ Pulse Policy Secure Version 5.0 Update r13.0
Pulsesecure ≫ Pulse Policy Secure Version 5.0 Update r13.1
Pulsesecure ≫ Pulse Policy Secure Version 5.0 Update r2.0
Pulsesecure ≫ Pulse Policy Secure Version 5.0 Update r3.0
Pulsesecure ≫ Pulse Policy Secure Version 5.0 Update r3.2
Pulsesecure ≫ Pulse Policy Secure Version 5.0 Update r4.0
Pulsesecure ≫ Pulse Policy Secure Version 5.0 Update r4.1
Pulsesecure ≫ Pulse Policy Secure Version 5.0 Update r5.0
Pulsesecure ≫ Pulse Policy Secure Version 5.0 Update r6.0
Pulsesecure ≫ Pulse Policy Secure Version 5.0 Update r7.0
Pulsesecure ≫ Pulse Policy Secure Version 5.0 Update r7.1
Pulsesecure ≫ Pulse Policy Secure Version 5.0 Update r8.0
Pulsesecure ≫ Pulse Policy Secure Version 5.0 Update r8.1
Pulsesecure ≫ Pulse Policy Secure Version 5.0 Update r9.0
Pulsesecure ≫ Pulse Policy Secure Version 5.1 Update r1.0
Pulsesecure ≫ Pulse Policy Secure Version 5.1 Update r1.1
Pulsesecure ≫ Pulse Policy Secure Version 5.1 Update r10.0
Pulsesecure ≫ Pulse Policy Secure Version 5.1 Update r11.0
Pulsesecure ≫ Pulse Policy Secure Version 5.1 Update r12.0
Pulsesecure ≫ Pulse Policy Secure Version 5.1 Update r12.1
Pulsesecure ≫ Pulse Policy Secure Version 5.1 Update r13.0
Pulsesecure ≫ Pulse Policy Secure Version 5.1 Update r14.0
Pulsesecure ≫ Pulse Policy Secure Version 5.1 Update r2.0
Pulsesecure ≫ Pulse Policy Secure Version 5.1 Update r2.1
Pulsesecure ≫ Pulse Policy Secure Version 5.1 Update r3.0
Pulsesecure ≫ Pulse Policy Secure Version 5.1 Update r3.2
Pulsesecure ≫ Pulse Policy Secure Version 5.1 Update r4.0
Pulsesecure ≫ Pulse Policy Secure Version 5.1 Update r5.0
Pulsesecure ≫ Pulse Policy Secure Version 5.1 Update r6.0
Pulsesecure ≫ Pulse Policy Secure Version 5.1 Update r7.0
Pulsesecure ≫ Pulse Policy Secure Version 5.1 Update r8.0
Pulsesecure ≫ Pulse Policy Secure Version 5.1 Update r9.0
Pulsesecure ≫ Pulse Policy Secure Version 5.1 Update r9.1
Pulsesecure ≫ Pulse Policy Secure Version 5.2 Update r1.0
Pulsesecure ≫ Pulse Policy Secure Version 5.2 Update r10.0
Pulsesecure ≫ Pulse Policy Secure Version 5.2 Update r11.0
Pulsesecure ≫ Pulse Policy Secure Version 5.2 Update r2.0
Pulsesecure ≫ Pulse Policy Secure Version 5.2 Update r3.0
Pulsesecure ≫ Pulse Policy Secure Version 5.2 Update r3.2
Pulsesecure ≫ Pulse Policy Secure Version 5.2 Update r4.0
Pulsesecure ≫ Pulse Policy Secure Version 5.2 Update r5.0
Pulsesecure ≫ Pulse Policy Secure Version 5.2 Update r6.0
Pulsesecure ≫ Pulse Policy Secure Version 5.2 Update r7.0
Pulsesecure ≫ Pulse Policy Secure Version 5.2 Update r7.1
Pulsesecure ≫ Pulse Policy Secure Version 5.2 Update r8.0
Pulsesecure ≫ Pulse Policy Secure Version 5.2 Update r9.0
Pulsesecure ≫ Pulse Policy Secure Version 5.2 Update r9.1
Pulsesecure ≫ Pulse Policy Secure Version 5.3 Update r1.0
Pulsesecure ≫ Pulse Policy Secure Version 5.3 Update r1.1
Pulsesecure ≫ Pulse Policy Secure Version 5.3 Update r10.0
Pulsesecure ≫ Pulse Policy Secure Version 5.3 Update r11.0
Pulsesecure ≫ Pulse Policy Secure Version 5.3 Update r12.0
Pulsesecure ≫ Pulse Policy Secure Version 5.3 Update r2.0
Pulsesecure ≫ Pulse Policy Secure Version 5.3 Update r3.0
Pulsesecure ≫ Pulse Policy Secure Version 5.3 Update r3.1
Pulsesecure ≫ Pulse Policy Secure Version 5.3 Update r4.0
Pulsesecure ≫ Pulse Policy Secure Version 5.3 Update r4.1
Pulsesecure ≫ Pulse Policy Secure Version 5.3 Update r5.0
Pulsesecure ≫ Pulse Policy Secure Version 5.3 Update r5.1
Pulsesecure ≫ Pulse Policy Secure Version 5.3 Update r5.2
Pulsesecure ≫ Pulse Policy Secure Version 5.3 Update r6.0
Pulsesecure ≫ Pulse Policy Secure Version 5.3 Update r7.0
Pulsesecure ≫ Pulse Policy Secure Version 5.3 Update r8.0
Pulsesecure ≫ Pulse Policy Secure Version 5.3 Update r8.1
Pulsesecure ≫ Pulse Policy Secure Version 5.3 Update r8.2
Pulsesecure ≫ Pulse Policy Secure Version 5.3 Update r9.0
Pulsesecure ≫ Pulse Policy Secure Version 5.4 Update r1
Pulsesecure ≫ Pulse Policy Secure Version 5.4 Update r2
Pulsesecure ≫ Pulse Policy Secure Version 5.4 Update r2.1
Pulsesecure ≫ Pulse Policy Secure Version 5.4 Update r3
Pulsesecure ≫ Pulse Policy Secure Version 5.4 Update r4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.73% 0.841
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877/
Vendor Advisory