Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
pulsesecure pulse connect secure vulnerabilities and exploits
(subscribe to this query)
6.8
CVSSv2
CVE-2017-11193
Pulse Connect Secure 8.3R1 has CSRF in diag.cgi. In the panel, the diag.cgi file is responsible for running commands such as ping, ping6, traceroute, traceroute6, nslookup, arp, and Portprobe. These functions do not have any protections against CSRF. That can allow an malicious u...
Pulsesecure Pulse Connect Secure 8.3r1.0
4.3
CVSSv2
CVE-2017-11194
Pulse Connect Secure 8.3R1 has Reflected XSS in adminservercacertdetails.cgi. In the admin panel, the certid parameter of adminservercacertdetails.cgi is reflected in the application's response and is not properly sanitized, allowing an malicious user to inject tags. An atta...
Pulsesecure Pulse Connect Secure 8.3r1.0
6.8
CVSSv2
CVE-2017-11196
Pulse Connect Secure 8.3R1 has CSRF in logout.cgi. The logout function of the admin panel is not protected by any CSRF tokens, thus allowing an malicious user to logout a user by making them visit a malicious web page.
Pulsesecure Pulse Connect Secure 8.3r1.0
3.5
CVSSv2
CVE-2016-4790
Cross-site scripting (XSS) vulnerability in the administrative user interface in Pulse Connect Secure (PCS) 8.2 prior to 8.2r1, 8.1 prior to 8.1r2, 8.0 prior to 8.0r9, and 7.4 prior to 7.4r13.4 allows remote malicious users to inject arbitrary web script or HTML via unspecified v...
Pulsesecure Pulse Connect Secure 8.1r1.0
Ivanti Connect Secure 8.1
Ivanti Connect Secure 8.0
Pulsesecure Pulse Connect Secure 7.4
Ivanti Connect Secure 8.2
7.8
CVSSv2
CVE-2016-4786
Pulse Connect Secure (PCS) 8.2 prior to 8.2r1, 8.1 prior to 8.1r3, 8.0 prior to 8.0r11, and 7.4 prior to 7.4r13.4 allow remote malicious users to cause a denial of service (CPU consumption) via unspecified vectors.
Pulsesecure Pulse Connect Secure 8.1r1.0
Ivanti Connect Secure 8.1
Ivanti Connect Secure 8.2
Ivanti Connect Secure 8.0
Pulsesecure Pulse Connect Secure 7.4
6.4
CVSSv2
CVE-2016-4787
Pulse Connect Secure (PCS) 8.2 prior to 8.2r1, 8.1 prior to 8.1r2, 8.0 prior to 8.0r10, and 7.4 prior to 7.4r13.4 allow remote malicious users to read sensitive system authentication files in an unspecified directory via unknown vectors.
Ivanti Connect Secure 8.0
Ivanti Connect Secure 8.2
Pulsesecure Pulse Connect Secure 7.4
Pulsesecure Pulse Connect Secure 8.1r1.0
Ivanti Connect Secure 8.1
6.4
CVSSv2
CVE-2016-4791
The administrative user interface in Pulse Connect Secure (PCS) 8.2 prior to 8.2r1, 8.1 prior to 8.1r2, 8.0 prior to 8.0r9, and 7.4 prior to 7.4r13.4 allows remote administrators to enumerate files, read arbitrary files, and conduct server side request forgery (SSRF) attacks via ...
Pulsesecure Pulse Connect Secure 8.1r1.0
Ivanti Connect Secure 8.1
Ivanti Connect Secure 8.2
Ivanti Connect Secure 8.0
Pulsesecure Pulse Connect Secure 7.4
5
CVSSv2
CVE-2016-4788
Pulse Connect Secure (PCS) 8.2 prior to 8.2r1, 8.1 prior to 8.1r2, 8.0 prior to 8.0r10, and 7.4 prior to 7.4r13.4 allow remote malicious users to read an unspecified system file via unknown vectors.
Ivanti Connect Secure 8.2
Pulsesecure Pulse Connect Secure 8.1r1.0
Ivanti Connect Secure 8.1
Pulsesecure Pulse Connect Secure 7.4
Ivanti Connect Secure 8.0
4.3
CVSSv2
CVE-2016-4789
Cross-site scripting (XSS) vulnerability in the system configuration section in the administrative user interface in Pulse Connect Secure (PCS) 8.2 prior to 8.2r1, 8.1 prior to 8.1r2, 8.0 prior to 8.0r9, and 7.4 prior to 7.4r13.4 allows remote malicious users to inject arbitrary ...
Pulsesecure Pulse Connect Secure 8.1r1.0
Ivanti Connect Secure 8.1
Ivanti Connect Secure 8.0
Pulsesecure Pulse Connect Secure 7.4
Ivanti Connect Secure 8.2
3.3
CVSSv2
CVE-2016-3985
The Terminal Services Remote Desktop Protocol (RDP) client session restrictions feature in Pulse Connect Secure (aka PCS) 8.1R7 and 8.2R1 allow remote authenticated users to bypass intended access restrictions via unspecified vectors.
Pulsesecure Pulse Connect Secure 8.1r7
Pulsesecure Pulse Connect Secure 8.2r1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-37316
firmware
CVE-2024-30078
CVE-2024-5995
remote code execution
logic flaw
CVE-2024-20693
CVE-2024-37315
CVE-2024-5464
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
2
3
4
5
6
7