VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Jun 28, 2019· Updated Jun 17, 2026

CVE-2018-20807

CVE-2018-20807

Description

An XSS issue has been found in welcome.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.1.x before 8.1R12, 8.2.x before 8.2R9, and 8.3.x before 8.3R3 due to one of the URL parameters not being sanitized properly.

Affected products

40
  • Ivanti/Connect Secure39 versions
    cpe:2.3:a:ivanti:connect_secure:8.1:r1.0:*:*:*:*:*:*+ 38 more
    • cpe:2.3:a:ivanti:connect_secure:8.1:r1.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.1:r1.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.1:r10.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.1:r11.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.1:r11.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.1:r2.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.1:r2.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.1:r3.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.1:r3.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.1:r4.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.1:r4.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.1:r5.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.1:r6.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.1:r7.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.1:r7:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.1:r8.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.1:r9.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.1:r9.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.1:r9.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.2:r1.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.2:r1.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.2:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.2:r2.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.2:r3.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.2:r3.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.2:r4.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.2:r4.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.2:r5.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.2:r5.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.2:r6.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.2:r7.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.2:r7.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.2:r7.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.2:r8.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.2:r8.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.2:r8.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.3:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.3:r2.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.3:r2:*:*:*:*:*:*
  • Pulsesecure/Pulse Connect Securellm-fuzzy
    Range: <8.1R12, <8.2R9, <8.3R3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.