Product by Pulsesecure

Pulse Secure Pulse Policy Secure

31 known vulnerabilities in Pulse Secure Pulse Policy Secure (Pulsesecure), 2 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Pulse Secure Pulse Policy Secure (Pulsesecure)

Critical	CVE-2019-11539	Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability In CISA KEVRansomwarealso in 2 other products	8.0	26.04.2019
Critical	CVE-2020-8218	Pulse Connect Secure Code Injection Vulnerability In CISA KEValso in 2 other products	7.2	30.07.2020
High	CVE-2019-11542	Pulse Secure Pulse Policy Secure: Stack-Based Buffer Overflow also in 2 other products	8.0	26.04.2019
High	CVE-2019-11477	Linux kernel: Integer Overflow or Wraparound also in 22 other products	7.5	18.06.2019
High	CVE-2019-11509	Ivanti Connect Secure: Improper Access Control also in 2 other products	8.8	03.06.2019
Critical	CVE-2018-6320	Pulse Secure Pulse Policy Secure: security vulnerability also in 2 other products	9.8	06.09.2018
High	CVE-2020-11581	Pulsesecure Pulse Connect Secure: OS Command Injection also in 1 other product	8.1	06.04.2020
Critical	CVE-2019-11540	Pulse Secure Pulse Policy Secure: security vulnerability also in 2 other products	8.3	26.04.2019
Critical	CVE-2018-5299	Pulsesecure Pulse Connect Secure: Stack-Based Buffer Overflow also in 1 other product	9.8	16.01.2018
High	CVE-2019-11478	Linux kernel: Allocation of Resources Without Limits or Throttling also in 22 other products	5.3	18.06.2019
High	CVE-2019-11543	Pulse Secure Pulse Policy Secure: Cross-Site Scripting (XSS) also in 2 other products	8.3	26.04.2019
High	CVE-2020-8206	Pulse Connect Secure: Improper Authentication also in 3 other products	8.1	30.07.2020
High	CVE-2020-15352	Ivanti Connect Secure: XML External Entity (XXE) also in 3 other products	7.2	27.10.2020
Critical	CVE-2018-20810	Ivanti Connect Secure: security vulnerability also in 1 other product	9.8	16.03.2019
High	CVE-2018-20809	Pulse Secure Pulse Policy Secure: security vulnerability also in 1 other product	7.5	16.03.2019
High	CVE-2020-8219	Pulse Connect Secure: Improper Handling of Insufficient Permissions or Privileges also in 3 other products	7.2	30.07.2020
Medium	CVE-2020-8220	Pulse Connect Secure: Uncontrolled Resource Consumption also in 3 other products	6.5	30.07.2020
Medium	CVE-2020-8222	Pulse Connect Secure: Path Traversal also in 3 other products	6.8	30.07.2020
High	CVE-2017-11455	Pulse Secure Pulse Policy Secure: Cross-Site Request Forgery (CSRF) also in 2 other products	8.8	29.08.2017
Medium	CVE-2020-8262	Pulse Connect Secure / Pulse Policy Secure: Cross-site Scripting also in 3 other products	6.1	28.10.2020
Medium	CVE-2020-8204	Pulse Connect Secure: Cross-site Scripting also in 3 other products	6.1	30.07.2020
Medium	CVE-2020-8221	Pulse Connect Secure: Path Traversal also in 3 other products	4.9	30.07.2020
Critical	CVE-2020-11580	Pulsesecure Pulse Connect Secure: security vulnerability also in 1 other product	9.1	06.04.2020
Medium	CVE-2020-8238	Pulse Connect Secure/ Pulse Policy Secure: Cross-site Scripting also in 3 other products	6.1	29.09.2020
Medium	CVE-2020-8216	Pulse Connect Secure: Exposure of Sensitive Information to an Unauthorized Actor also in 3 other products	4.3	30.07.2020

All vulnerabilities in search

All products by Pulsesecure

Key figures

Vulnerabilities