Approved changes feed: RSS · Atom

cpe:2.3:a:ivanti:connect_secure:8.1:*:*:*:*:*:*:*

part: a version: 8.1 update: *

VendorIvanti (40b984ad-e54c-5e1b-9aa1-2a4cd4d61129)
ProductConnect Secure (61f5b622-21c4-5d14-b120-bd5f32132cfb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-11543 vulnerable 2026-06-08 05:12:37.613757 Details available
HIGH (8.3)
XSS exists in the admin web console in Pulse Secure Pulse Connect Secure (PCS) 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, and 5.2RX before 5.2R12.1.
Published: 2019-04-26T01:40:43.000Z
Updated: 2024-11-15T15:26:20.782Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11542 vulnerable 2026-06-08 05:12:37.610112 Details available
HIGH (8)
In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, an authenticated attacker (via the admin web interface) can send a specially crafted message resulting in a stack buffer overflow.
Published: 2019-04-26T01:40:33.000Z
Updated: 2024-08-04T22:55:40.973Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11539 vulnerable 2026-06-08 05:12:37.536394 Details available
HIGH (8)
In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.
Published: 2019-04-26T01:39:36.000Z
Updated: 2025-10-21T23:45:38.985Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11509 vulnerable 2026-06-08 05:12:37.382101 Details available
In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4 and Pulse Policy Secure (PPS) before 5.1R15.1, 5.2 before 5.2R12.1, 5.3 before 5.3R15.1, 5.4 before 5.4R7.1, and 9.0 before 9.0R3.2, an authenticated attacker (via the admin web interface) can exploit Incorrect Access Control to execute arbitrary code on the appliance.
Published: 2019-06-03T19:34:46.000Z
Updated: 2024-08-04T22:55:40.698Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11508 vulnerable 2026-06-08 05:12:37.350940 Details available
HIGH (8.6)
In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an authenticated attacker (via the admin web interface) can exploit Directory Traversal to execute arbitrary code on the appliance.
Published: 2019-05-08T16:49:51.000Z
Updated: 2024-08-04T22:55:40.588Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6320 vulnerable 2026-06-08 05:11:53.580971 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14366 vulnerable 2026-06-08 05:10:52.829211 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11455 vulnerable 2026-06-08 05:08:37.775596 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4791 vulnerable 2026-06-08 05:07:55.192196 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4790 vulnerable 2026-06-08 05:07:55.191791 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4789 vulnerable 2026-06-08 05:07:55.191400 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4788 vulnerable 2026-06-08 05:07:55.190928 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4787 vulnerable 2026-06-08 05:07:55.190542 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4786 vulnerable 2026-06-08 05:07:55.187268 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.