Pulsesecure vulnerabilities

93 vulnerabilities

Known vulnerabilities in Pulsesecure products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 17 products.

Products

17
6.8CVE-2018-16261pulsesecurepulse_secure_desktop_client
EPSS score
0.20%
In Pulse Secure Pulse Desktop Client 5.3RX before 5.3R5 and 9.0R1, there is a Privilege Escalation Vulnerability with Dynamic Certificate Trust.7.8CVE-2018-16513artifexghostscript+6
EPSS score
1.50%
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the setcolor function to crash the interpreter or possibly have unspecified other impact.5.8CVE-2018-11002pulsesecurepulse_secure_desktop_client
EPSS score
0.90%
Pulse Secure Desktop Client 5.3 up to and including R6.0 build 1769 on Windows has Insecure Permissions.9.8CVE-2018-20810ivanticonnect_secure+1
EPSS score
1.77%
Session data between cluster nodes during cluster synchronization is not properly encrypted in Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R2 and Pulse Policy Secure (PPS) 5.4RX before 5.4R2. This is not applicable to PCS 8.1RX, PPS 5.2RX, or stand-alone devices.4.3CVE-2018-20307pulsesecurevirtual_traffic_manager
EPSS score
0.83%
Pulse Secure Virtual Traffic Manager 9.9 versions prior to 9.9r2 and 10.4r1 allow a remote authenticated user to obtain sensitive historical activity information by leveraging incorrect permission validation.5.4CVE-2018-20306pulsesecurevirtual_traffic_manager
EPSS score
0.54%
A stored cross-site scripting (XSS) vulnerability in the web administration user interface of Pulse Secure Virtual Traffic Manager may allow a remote authenticated attacker to inject web script or HTML via a crafted website and steal sensitive data and credentials. Affected releases are Pulse Secure Virtual Traffic Manager 9.9 versions prior to 9.9r2 and 10.4r1.7.5CVE-2018-20809ivanticonnect_secure+1
EPSS score
2.73%
A crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R5 and Pulse Policy Secure 5.4RX before 5.4R5. This is not applicable to PCS 8.1RX.8.8CVE-2018-20193pulsesecuresecure_access_series_ssl_vpn_sa-4000
EPSS score
1.30%
Certain Secure Access SA Series SSL VPN products (originally developed by Juniper Networks but now sold and supported by Pulse Secure, LLC) allow privilege escalation, as demonstrated by Secure Access SSL VPN SA-4000 5.1R5 (build 9627) 4.2 Release (build 7631). This occurs because appropriate controls are not performed. Specifically, it is possible for a readonly user to change the administrator user password by making a local copy of the /dana-admin/user/update.cgi page, changing the "user" value, and saving the changes.6.1CVE-2018-20814ivanticonnect_secure+1
EPSS score
1.59%
An XSS issue was found with Psaldownload.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.3R2 before 8.3R2 and Pulse Policy Secure (PPS) 5.4RX before 5.4R2. This is not applicable to PCS 8.1RX or PPS 5.2RX.7.5CVE-2018-20812pulsesecurepulse_secure_desktop_client
EPSS score
1.11%
An information exposure issue where IPv6 DNS traffic would be sent outside of the VPN tunnel (when Traffic Enforcement was enabled) exists in Pulse Secure Pulse Secure Desktop 9.0R1 and below. This is applicable only to dual-stack (IPv4/IPv6) endpoints.5.5CVE-2018-9849pulsesecurepulse_connect_secure
EPSS score
0.94%
Pulse Secure Pulse Connect Secure 8.1.x before 8.1R14, 8.2.x before 8.2R11, and 8.3.x before 8.3R5 do not properly process nested XML entities, which allows remote attackers to cause a denial of service (memory consumption and memory errors) via a crafted XML document.6.1CVE-2018-14366ivanticonnect_secure+2
EPSS score
1.48%
download.cgi in Pulse Secure Pulse Connect Secure 8.1RX before 8.1R13 and 8.3RX before 8.3R4 and Pulse Policy Secure through 5.2RX before 5.2R10 and 5.4RX before 5.4R4 have an Open Redirect Vulnerability.7.2CVE-2018-7572pulsesecurepulse_secure_desktop
EPSS score
0.36%
Pulse Secure Client 9.0R1 and 5.3RX before 5.3R5, when configured to authenticate VPN users during Windows Logon, can allow attackers to bypass Windows authentication and execute commands on the system with the privileges of Pulse Secure Client. The attacker must interrupt the client's network connectivity, and trigger a connection to a crafted proxy server with an invalid SSL certificate that allows certification-manager access, leading to the ability to browse local files and execute local programs.8.6CVE-2018-18284alpineghostscript+13
EPSS score
16.29%
Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving the 1Policy operator.9.8CVE-2018-5299pulsesecurepulse_connect_secure+1
EPSS score
3.06%
A stack-based Buffer Overflow Vulnerability exists in the web server in Pulse Secure Pulse Connect Secure (PCS) before 8.3R4 and Pulse Policy Secure (PPS) before 5.4R4, leading to memory corruption and possibly remote code execution.7.8CVE-2018-15909alpineghostscript+13
EPSS score
3.02%
In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could be used by attackers able to supply crafted PostScript files to crash the interpreter or potentially execute code.7.8CVE-2018-15865pulsesecurepulse_secure_desktop_client
EPSS score
0.32%
The Pulse Secure Desktop (macOS) has a Privilege Escalation Vulnerability.7.8CVE-2018-15911alpineghostscript+13
EPSS score
3.04%
In Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could use uninitialized memory access in the aesdecode operator to crash the interpreter or potentially execute code.5.3CVE-2018-15726pulsesecurepulse_secure_desktop_client
EPSS score
0.33%
The Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R1 has a Privilege Escalation Vulnerability.5.5CVE-2018-15749pulsesecurepulse_secure_desktop_client
EPSS score
0.32%
The Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R1 has a Format String Vulnerability.