High severity7.5NVD Advisory· Published Jun 28, 2019· Updated Jun 17, 2026

CVE-2018-20809

Description

A crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R5 and Pulse Policy Secure 5.4RX before 5.4R5. This is not applicable to PCS 8.1RX.

Affected products

Pulsesecure/Pulse Connect Securellm-fuzzy
Range: <8.3R5
Pulsesecure/Policy Securellm-fuzzy
Range: <5.4R5

Patches

Vulnerability mechanics

References

kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000