PT-2019-10253 · Pulse Secure · Pulse Connect Secure+1
CVE-2018-20814
·
Published
2019-03-16
·
Updated
2024-02-27
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions:
Pulse Connect Secure (PCS) versions 8.3R2 and earlier
Pulse Policy Secure (PPS) versions 5.4RX and earlier
Description:
A cross-site scripting (XSS) issue was discovered in Psaldownload.cgi. This issue affects Pulse Secure products.
Recommendations:
For Pulse Connect Secure (PCS) versions 8.3R2 and earlier, update to a version later than 8.3R2.
For Pulse Policy Secure (PPS) versions 5.4RX and earlier, update to a version later than 5.4R2.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Pulse Connect Secure
Pulse Policy Secure