Unrated severityNVD Advisory· Published Sep 29, 2020· Updated Aug 4, 2024

CVE-2020-8238

Description

A vulnerability in the authenticated user web interface of Pulse Connect Secure and Pulse Policy Secure < 9.1R8.2 could allow attackers to conduct Cross-Site Scripting (XSS).

Affected products

Pulsesecure/Pulse Connect Securellm-fuzzy
Range: <9.1R8.2
Pulsesecure/Policy Securellm-fuzzy
Range: <9.1R8.2
Pulsecms/Pulse Connect Secure/ Pulse Policy Securev5
Range: Fixed in 9.1R8.2

Patches

Vulnerability mechanics

References

kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44588mitrex_refsource_MISC
www.gosecure.net/blog/2020/11/13/forget-your-perimeter-part-2-four-vulnerabilities-in-pulse-connect-secure/mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000