VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Jun 28, 2019· Updated Jun 17, 2026

CVE-2018-20808

CVE-2018-20808

Description

An XSS issue has been found with rd.cgi in Pulse Secure Pulse Connect Secure 8.3RX before 8.3R3 due to improper header sanitization. This is not applicable to 8.1RX.

Affected products

4
  • Ivanti/Connect Secure3 versions
    cpe:2.3:a:ivanti:connect_secure:8.3:r1:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ivanti:connect_secure:8.3:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.3:r2.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:8.3:r2:*:*:*:*:*:*
  • Pulsesecure/Pulse Connect Securellm-fuzzy
    Range: <8.3R3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.