VYPR
High severity7.2CISA KEVNVD Advisory· Published Jul 30, 2020· Updated Jun 17, 2026

CVE-2020-8218

CVE-2020-8218

Description

A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.

Affected products

26
  • cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:*+ 11 more
    • cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:*range: <=9.0
    • cpe:2.3:a:ivanti:connect_secure:9.1:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r5:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r6:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r7:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:policy_secure:9.1:-:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:ivanti:policy_secure:9.1:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r3.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r4.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r4.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r5:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r6:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r7:*:*:*:*:*:*
  • cpe:2.3:a:pulsesecure:pulse_policy_secure:*:*:*:*:*:*:*:*
    Range: <=9.0
  • Pulse Connect Secure/Pulse Connect Securedescription
  • Range: <9.1R8

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.