GCVE - cpe:2.3:a:ivanti:connect_secure:8.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ivanti:connect_secure:8.0:*:*:*:*:*:*:*

part: a version: 8.0 update: *

Vendor	Ivanti (`40b984ad-e54c-5e1b-9aa1-2a4cd4d61129`)
Product	Connect Secure (`61f5b622-21c4-5d14-b120-bd5f32132cfb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-4791`	vulnerable	2026-06-08 05:07:55.192251	Details available The administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote administrators to enumerate files, read arbitrary files, and conduct server side request forgery (SSRF) attacks via unspecified vectors. Published: 2016-05-26T14:00:00.000Z Updated: 2024-08-06T00:39:26.251Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1035932 https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40210	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-4790`	vulnerable	2026-06-08 05:07:55.191832	Details available Cross-site scripting (XSS) vulnerability in the administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2016-05-26T14:00:00.000Z Updated: 2024-08-06T00:39:26.268Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1035932 https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40211	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-4789`	vulnerable	2026-06-08 05:07:55.191439	Details available Cross-site scripting (XSS) vulnerability in the system configuration section in the administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2016-05-26T14:00:00.000Z Updated: 2024-11-14T19:49:26.270Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1035932 https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40209	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-4788`	vulnerable	2026-06-08 05:07:55.190985	Details available Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read an unspecified system file via unknown vectors. Published: 2016-05-26T14:00:00.000Z Updated: 2024-08-06T00:39:26.323Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1035932 https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40208	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-4787`	vulnerable	2026-06-08 05:07:55.190480	Details available Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read sensitive system authentication files in an unspecified directory via unknown vectors. Published: 2016-05-26T14:00:00.000Z Updated: 2024-08-06T00:39:26.244Z Open on db.gcve.eu Reference links https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40207 http://www.securitytracker.com/id/1035932	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-4786`	vulnerable	2026-06-08 05:07:55.189524	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.