← All advisories

Medium severity6.1NVD Advisory· Published May 8, 2019· Updated Jun 17, 2026

CVE-2019-11507

CVE-2019-11507

Description

In Pulse Secure Pulse Connect Secure (PCS) 8.3.x before 8.3R7.1 and 9.0.x before 9.0R3, an XSS issue has been found on the Application Launcher page.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

18

Ivanti/Connect Secure15 versions
cpe:2.3:a:ivanti:connect_secure:8.3:r1.1:*:*:*:*:*:*+ 14 more
- cpe:2.3:a:ivanti:connect_secure:8.3:r1.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.3:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.3:r2.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.3:r2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.3:r3:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.3:r4:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.3:r5.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.3:r5.2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.3:r5:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.3:r6.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.3:r6:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:8.3:r7:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.0:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.0:r2.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.0:r2:*:*:*:*:*:*
Pulse Secure/Pulse Connect Securedescription
Pulsesecure/PCSllm-create
Range: <8.3R7.1, <9.0R3
Pulsesecure/Pulse Connect Securellm-fuzzy
Range: <8.3R7.1, <9.0R3

Patches

Vulnerability mechanics

References

7

kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101/nvdPatchVendor Advisory
devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/nvdExploitThird Party Advisory
i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdfnvdExploitThird Party Advisory
www.securityfocus.com/bid/108073nvdBroken LinkThird Party AdvisoryVDB Entry
kb.pulsesecure.netnvdThird Party AdvisoryVendor Advisory
kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516nvdThird Party Advisory
www.kb.cert.org/vuls/id/927237nvdThird Party AdvisoryUS Government Resource

News mentions

0

No linked articles in our index yet.