8

CVE-2019-11539: Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability

CVSS: 8.0v3.0HighKEVRansomwareAnalyzed
Published 26-04-2019Last modified 21-10-2025
Open JSON

Vulnerability summary

CVE-2019-11539 is a high (CVSS 8.0) OS Command Injection vulnerability in Ivanti Pulse Connect Secure and Pulse Policy Secure. It is known to be exploited: CISA lists it, first on 03-11-2021. It has been used in ransomware campaigns. EPSS estimates a 98.54% chance of exploitation in the next 30 days, higher than 99.9% of scored vulnerabilities. 5 public exploits are recorded.

Overall risk
90/100
0100
Critical · default modelHow is this calculated?
CVSS score
8.0/10
010
High · v3.0 (CVE.org)
EPSS score
98.54%
0%100%
Critical · 0.00 pp in 30 days
KEVListedCISA
RansomwareKnown useFlagged by CISA
Public exploits5reference, metasploit, exploit-database

Timeline

  1. 26-04-2019
    PublishedVulnerability first disclosed.
  2. 03-11-2021
    Added to CISA KEVIvanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability
  3. 03-05-2022
    CISA remediation dueApply updates per vendor instructions.
  4. 21-10-2025
    Last modifiedVulnerability information updated.

Description

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.

CVSS metrics

4 scores · 2 sources · 3 versions

EPSS trend

Probability

98.54%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 98.54% on 21-09-2026

21-09-202621-10-2026
EPSS score
98.54%

Known exploited

Compare KEV catalogs
CISA KEVListed
Added
03-11-2021
Federal due date
03-05-2022
Ransomware

CISA required action

Apply updates per vendor instructions. nvd.nist.gov/vuln/detail/CVE-2019-11539

Public exploits

5 found
  • referenceUnverified

    Exploit Reference (i.blackhat.com)

    Maturity: unknown

  • referenceUnverified

    Exploit Reference (devco.re)

    Maturity: unknown

  • MetasploitMetasploitremoteVerified

    Pulse Secure VPN Arbitrary Command Execution

    exploit/linux/http/pulse_secure_cmd_exec

    Maturity: weaponized

Show all 5 exploits
  • exploit-databaseremotemultipleUnverified

    Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN - Remote Code Execution

    Maturity: poc

  • exploit-databaseremotemultipleVerified

    Pulse Secure VPN - Arbitrary Command Execution (Metasploit)

    Maturity: weaponized

Weaknesses

CWE · root cause

Affected systems

Ivanti2 products
  • connect_secure8.1 | 8.1:r1.0 | 8.1:r1.1 | 8.1:r10.0 | 8.1:r11.0 | 8.1:r11.1 | 8.1:r12.0 | 8.1:r12.1 | 8.1:r13.0 | 8.1:r14.0 | 8.1:r2.0 | 8.1:r2.1 | 8.1:r3.0 | 8.1:r3.1 | 8.1:r3.2 | 8.1:r4.0 | 8.1:r4.1 | 8.1:r5.0 | 8.1:r6.0 | 8.1:r7 | 8.1:r7.0 | 8.1:r8.0 | 8.1:r9.0 | 8.1:r9.1 | 8.1:r9.2 | 8.2 | 8.2:r1 | 8.2:r1.0 | 8.2:r1.1 | 8.2:r10.0 | 8.2:r11.0 | 8.2:r12.0 | 8.2:r2.0 | 8.2:r3.0 | 8.2:r3.1 | 8.2:r4.0 | 8.2:r4.1 | 8.2:r5.0 | 8.2:r5.1 | 8.2:r6.0 | 8.2:r7.0 | 8.2:r7.1 | 8.2:r7.2 | 8.2:r8.0 | 8.2:r8.1 | 8.2:r8.2 | 8.2:r9.0 | 8.3 | 8.3:r1 | 8.3:r1.1 | 8.3:r2 | 8.3:r2.1 | 8.3:r3 | 8.3:r4 | 8.3:r5 | 8.3:r5.1 | 8.3:r5.2 | 8.3:r6 | 8.3:r6.1 | 8.3:r7 | 9.0:r1 | 9.0:r2 | 9.0:r2.1 | 9.0:r3 | 9.0:r3.1 | 9.0:r3.2 | 9.0:r3.3
  • policy_secure9.0:r1 | 9.0:r2 | 9.0:r2.1 | 9.0:r3 | 9.0:r3.1
Pulsesecure1 product
  • pulse_policy_secure5.1r1.0 | 5.1r1.1 | 5.1r2.0 | 5.1r2.1 | 5.1r3.0 | 5.1r3.2 | 5.1r4.0 | 5.1r5.0 | 5.1r6.0 | 5.1r7.0 | 5.1r8.0 | 5.1r9.0 | 5.1r9.1 | 5.1r10.0 | 5.1r11.0 | 5.1r11.1 | 5.1r12.0 | 5.1r12.1 | 5.1r13.0 | 5.1r14.0 | 5.2r1.0 | 5.2r2.0 | 5.2r3.0 | 5.2r3.2 | 5.2r4.0 | 5.2r5.0 | 5.2r6.0 | 5.2r7.0 | 5.2r7.1 | 5.2r8.0 | 5.2r9.0 | 5.2r9.1 | 5.2r10.0 | 5.2r11.0 | 5.2rx | 5.3r1.0 | 5.3r1.1 | 5.3r2.0 | 5.3r3.0 | 5.3r3.1 | 5.3r4.0 | 5.3r4.1 | 5.3r5.0 | 5.3r5.1 | 5.3r5.2 | 5.3r6.0 | 5.3r7.0 | 5.3r8.0 | 5.3r8.1 | 5.3r8.2 | 5.3r9.0 | 5.3r11.0 | 5.3r12.0 | 5.3rx | 5.4r1 | 5.4r2 | 5.4r2.1 | 5.4r3 | 5.4r4 | 5.4r5 | 5.4r5.2 | 5.4r6 | 5.4r6.1 | 5.4r7 | 5.4rx

2 vendors · 3 products

References

10 links