Ivanti

Connect Secure

132 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2019-11543

  • EPSS 0.18%
  • Veröffentlicht 26.04.2019 02:29:00
  • Zuletzt bearbeitet 21.11.2024 04:21:18

XSS exists in the admin web console in Pulse Secure Pulse Connect Secure (PCS) 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, and 5.2RX before 5.2R12.1.

8.1

CVE-2019-11213

  • EPSS 2.62%
  • Veröffentlicht 12.04.2019 15:29:00
  • Zuletzt bearbeitet 21.11.2024 04:20:44

In Pulse Secure Pulse Desktop Client and Network Connect, an attacker could access session tokens to replay and spoof sessions, and as a result, gain unauthorized access as an end user, a related issue to CVE-2019-1573. (The endpoint would need to be...

9.8

CVE-2018-6320

  • EPSS 5.24%
  • Veröffentlicht 06.09.2018 23:29:02
  • Zuletzt bearbeitet 21.11.2024 04:10:28

A vulnerability has been discovered in login.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.1RX before 8.1R12 and 8.3RX before 8.3R2 and Pulse Policy Secure (PPS) 5.2RX before 5.2R9 and 5.4RX before 5.4R2 wherein an http(s) Host header received fro...

6.1

CVE-2018-14366

  • EPSS 0.1%
  • Veröffentlicht 06.09.2018 23:29:00
  • Zuletzt bearbeitet 21.11.2024 03:48:55

download.cgi in Pulse Secure Pulse Connect Secure 8.1RX before 8.1R13 and 8.3RX before 8.3R4 and Pulse Policy Secure through 5.2RX before 5.2R10 and 5.4RX before 5.4R4 have an Open Redirect Vulnerability.

8.8

CVE-2017-11455

  • EPSS 0.56%
  • Veröffentlicht 29.08.2017 15:29:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

diag.cgi in Pulse Connect Secure 8.2R1 through 8.2R5, 8.1R1 through 8.1R10 and Pulse Policy Secure 5.3R1 through 5.3R5, 5.2R1 through 5.2R8, and 5.1R1 through 5.1R10 allow remote attackers to hijack the authentication of administrators for requests t...

5.3

CVE-2016-4792

  • EPSS 0.37%
  • Veröffentlicht 26.05.2016 14:59:08
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Pulse Connect Secure (PCS) 8.2 before 8.2r1 allows remote attackers to disclose sign in pages via unspecified vectors.

8.6

CVE-2016-4791

  • EPSS 0.22%
  • Veröffentlicht 26.05.2016 14:59:07
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote administrators to enumerate files, read arbitrary files, and conduct server side request forge...

5.5

CVE-2016-4790

  • EPSS 0.08%
  • Veröffentlicht 26.05.2016 14:59:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote attackers to inject arbitrary web script or HTML v...

6.1

CVE-2016-4789

  • EPSS 0.09%
  • Veröffentlicht 26.05.2016 14:59:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the system configuration section in the administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote attackers to i...

5.8

CVE-2016-4788

  • EPSS 0.21%
  • Veröffentlicht 26.05.2016 14:59:04
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read an unspecified system file via unknown vectors.