Pulsesecure

Pulse Policy Secure

31 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2020-8262

  • EPSS 0.14%
  • Veröffentlicht 28.10.2020 13:15:13
  • Zuletzt bearbeitet 21.11.2024 05:38:36

A vulnerability in the Pulse Connect Secure / Pulse Policy Secure below 9.1R9 could allow attackers to conduct Cross-Site Scripting (XSS) and Open Redirection for authenticated user web interface.

4.3

CVE-2020-8261

  • EPSS 0.61%
  • Veröffentlicht 28.10.2020 13:15:13
  • Zuletzt bearbeitet 21.11.2024 05:38:36

A vulnerability in the Pulse Connect Secure / Pulse Policy Secure < 9.1R9 is vulnerable to arbitrary cookie injection.

7.2

CVE-2020-15352

  • EPSS 6.56%
  • Veröffentlicht 27.10.2020 05:15:12
  • Zuletzt bearbeitet 21.11.2024 05:05:23

An XML external entity (XXE) vulnerability in Pulse Connect Secure (PCS) before 9.1R9 and Pulse Policy Secure (PPS) before 9.1R9 allows remote authenticated admins to conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML requ...

6.1

CVE-2020-8238

Exploit
  • EPSS 0.17%
  • Veröffentlicht 30.09.2020 18:15:28
  • Zuletzt bearbeitet 21.11.2024 05:38:34

A vulnerability in the authenticated user web interface of Pulse Connect Secure and Pulse Policy Secure < 9.1R8.2 could allow attackers to conduct Cross-Site Scripting (XSS).

6.8

CVE-2020-8222

  • EPSS 0.86%
  • Veröffentlicht 30.07.2020 13:15:12
  • Zuletzt bearbeitet 21.11.2024 05:38:32

A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 that allowed an authenticated attacker via the administrator web interface to perform an arbitrary file reading vulnerability through Meeting.

4.9

CVE-2020-8221

  • EPSS 2.86%
  • Veröffentlicht 30.07.2020 13:15:12
  • Zuletzt bearbeitet 21.11.2024 05:38:31

A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 which allows an authenticated attacker to read arbitrary files via the administrator web interface.

6.5

CVE-2020-8220

  • EPSS 6.67%
  • Veröffentlicht 30.07.2020 13:15:11
  • Zuletzt bearbeitet 21.11.2024 05:38:31

A denial of service vulnerability exists in Pulse Connect Secure <9.1R8 that allows an authenticated attacker to perform command injection via the administrator web which can cause DOS.

7.2

CVE-2020-8219

  • EPSS 1.73%
  • Veröffentlicht 30.07.2020 13:15:11
  • Zuletzt bearbeitet 21.11.2024 05:38:31

An insufficient permission check vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to change the password of a full administrator.

7.2

CVE-2020-8218

Warnung Exploit
  • EPSS 91.07%
  • Veröffentlicht 30.07.2020 13:15:11
  • Zuletzt bearbeitet 30.07.2025 18:59:52

A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.

5.4

CVE-2020-8217

  • EPSS 0.14%
  • Veröffentlicht 30.07.2020 13:15:11
  • Zuletzt bearbeitet 21.11.2024 05:38:31

A cross site scripting (XSS) vulnerability in Pulse Connect Secure <9.1R8 allowed attackers to exploit in the URL used for Citrix ICA.