Vendor
Pulsesecure
93 known vulnerabilities in products by Pulsesecure, 3 of them actively exploited (CISA KEV).
Key figures
93
Vulnerabilities
3
Actively exploited (KEV)
1
Used by ransomware
11
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2019-11539 | Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability In CISA KEVRansomwarealso in 2 other products | 8.0 | |
| Critical | CVE-2020-8218 | Pulse Connect Secure Code Injection Vulnerability In CISA KEValso in 2 other products | 7.2 | |
| Critical | CVE-2021-22900 | Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability In CISA KEValso in 1 other product | 7.2 | |
| Critical | CVE-2016-0799 | OpenSSL: Out-of-Bounds Read | 9.8 | |
| High | CVE-2021-22908 | Pulse Connect Secure: Classic Buffer Overflow | 8.8 | |
| High | CVE-2019-11542 | Pulse Secure Pulse Policy Secure: Stack-Based Buffer Overflow | 8.0 | |
| High | CVE-2018-18284 | Artifex Ghostscript: security vulnerability | 8.6 | |
| High | CVE-2019-11508 | Ivanti Connect Secure: Path Traversal | 8.6 | |
| High | CVE-2019-11477 | Linux kernel: Integer Overflow or Wraparound | 7.5 | |
| High | CVE-2019-11509 | Ivanti Connect Secure: Improper Access Control | 8.8 | |
| Critical | CVE-2018-6320 | Pulse Secure Pulse Policy Secure: security vulnerability | 9.8 | |
| High | CVE-2020-11581 | Pulsesecure Pulse Connect Secure: OS Command Injection | 8.1 | |
| Critical | CVE-2019-11540 | Pulse Secure Pulse Policy Secure: security vulnerability | 8.3 | |
| Critical | CVE-2018-5299 | Pulsesecure Pulse Connect Secure: Stack-Based Buffer Overflow | 9.8 | |
| Medium | CVE-2016-0800 | OpenSSL: security vulnerability | 5.9 | |
| High | CVE-2021-22937 | Pulse Connect Secure: Unrestricted Upload of File with Dangerous Type | 7.2 | |
| Critical | CVE-2016-4787 | Ivanti Connect Secure: security vulnerability | 10.0 | |
| High | CVE-2019-11541 | Pulsesecure Pulse Connect Secure: security vulnerability | 8.3 | |
| Medium | CVE-2022-21826 | Pulse Connect Secure VPN Server: HTTP Request/Response Smuggling | 5.4 | |
| High | CVE-2019-11478 | Linux kernel: Allocation of Resources Without Limits or Throttling | 5.3 | |
| High | CVE-2021-22934 | Pulse Connect Secure: Classic Buffer Overflow | 7.2 | |
| High | CVE-2019-11543 | Pulse Secure Pulse Policy Secure: Cross-Site Scripting (XSS) | 8.3 | |
| High | CVE-2020-8206 | Pulse Connect Secure: Improper Authentication | 8.1 | |
| Critical | CVE-2020-8239 | Pulse Secure Desktop Cient: Privilege Escalation | 9.8 | |
| High | CVE-2019-11213 | Pulsesecure Pulse Connect Secure: security vulnerability | 8.1 |
News
Products
| Pulse Connect Secure | 57 | 1 |
| Pulse Secure Pulse Policy Secure | 31 | 2 |
| Pulse Secure Desktop Client | 18 | 0 |
| PulseSecure Pulse Secure Desktop | 3 | 0 |
| Virtual Traffic Manager | 3 | 0 |