Medium severity4.3NVD Advisory· Published Oct 28, 2020· Updated Jun 17, 2026

CVE-2020-8261

Description

A vulnerability in the Pulse Connect Secure / Pulse Policy Secure < 9.1R9 is vulnerable to arbitrary cookie injection.

Ivanti/Connect Secure8 versions
cpe:2.3:a:ivanti:connect_secure:9.1:r1:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:ivanti:connect_secure:9.1:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r3:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r4:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r5:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r6:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r7:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r8:*:*:*:*:*:*
Ivanti/Policy Secure8 versions
cpe:2.3:a:ivanti:policy_secure:9.1:r1:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:ivanti:policy_secure:9.1:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r3:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r4:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r5:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r6:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r7:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r8:*:*:*:*:*:*
Pulsesecure/Pulse Connect Secure2 versions
cpe:2.3:a:pulsesecure:pulse_connect_secure:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:pulsesecure:pulse_connect_secure:*:*:*:*:*:*:*:*range: <9.1
- (no CPE)range: <9.1R9
Pulsesecure/Policy Secure2 versions
cpe:2.3:a:pulsesecure:pulse_policy_secure:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:pulsesecure:pulse_policy_secure:*:*:*:*:*:*:*:*range: <9.1
- (no CPE)range: <9.1R9
Pulse/Pulse Connect Secure / Pulse Policy Securedescription