Pulsesecure

Pulse Connect Secure

57 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2021-22900

Warning
  • EPSS 1.67%
  • Published 27.05.2021 12:15:07
  • Last modified 21.03.2025 19:25:50

A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.

6.1

CVE-2020-8262

  • EPSS 0.14%
  • Published 28.10.2020 13:15:13
  • Last modified 21.11.2024 05:38:36

A vulnerability in the Pulse Connect Secure / Pulse Policy Secure below 9.1R9 could allow attackers to conduct Cross-Site Scripting (XSS) and Open Redirection for authenticated user web interface.

4.3

CVE-2020-8261

  • EPSS 0.61%
  • Published 28.10.2020 13:15:13
  • Last modified 21.11.2024 05:38:36

A vulnerability in the Pulse Connect Secure / Pulse Policy Secure < 9.1R9 is vulnerable to arbitrary cookie injection.

7.2

CVE-2020-15352

  • EPSS 6.56%
  • Published 27.10.2020 05:15:12
  • Last modified 21.11.2024 05:05:23

An XML external entity (XXE) vulnerability in Pulse Connect Secure (PCS) before 9.1R9 and Pulse Policy Secure (PPS) before 9.1R9 allows remote authenticated admins to conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML requ...

4.9

CVE-2020-8256

Exploit
  • EPSS 2.71%
  • Published 30.09.2020 18:15:29
  • Last modified 21.11.2024 05:38:36

A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to gain arbitrary file reading access through Pulse Collaboration via XML External Entity (XXE) vulnerability.

6.1

CVE-2020-8238

Exploit
  • EPSS 0.17%
  • Published 30.09.2020 18:15:28
  • Last modified 21.11.2024 05:38:34

A vulnerability in the authenticated user web interface of Pulse Connect Secure and Pulse Policy Secure < 9.1R8.2 could allow attackers to conduct Cross-Site Scripting (XSS).

6.8

CVE-2020-8222

  • EPSS 0.86%
  • Published 30.07.2020 13:15:12
  • Last modified 21.11.2024 05:38:32

A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 that allowed an authenticated attacker via the administrator web interface to perform an arbitrary file reading vulnerability through Meeting.

4.9

CVE-2020-8221

  • EPSS 2.86%
  • Published 30.07.2020 13:15:12
  • Last modified 21.11.2024 05:38:31

A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 which allows an authenticated attacker to read arbitrary files via the administrator web interface.

6.5

CVE-2020-8220

  • EPSS 6.67%
  • Published 30.07.2020 13:15:11
  • Last modified 21.11.2024 05:38:31

A denial of service vulnerability exists in Pulse Connect Secure <9.1R8 that allows an authenticated attacker to perform command injection via the administrator web which can cause DOS.

7.2

CVE-2020-8219

  • EPSS 1.73%
  • Published 30.07.2020 13:15:11
  • Last modified 21.11.2024 05:38:31

An insufficient permission check vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to change the password of a full administrator.