Approved changes feed: RSS · Atom

cpe:2.3:a:ivanti:connect_secure:8.3:r1:*:*:*:*:*:*

part: a version: 8.3 update: r1

VendorIvanti (40b984ad-e54c-5e1b-9aa1-2a4cd4d61129)
ProductConnect Secure (61f5b622-21c4-5d14-b120-bd5f32132cfb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-11539 vulnerable 2026-06-08 05:12:37.606185 Details available
HIGH (8)
In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.
Published: 2019-04-26T01:39:36.000Z
Updated: 2025-10-21T23:45:38.985Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11538 vulnerable 2026-06-08 05:12:37.534566 Details available
HIGH (7.7)
In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1, an NFS problem could allow an authenticated attacker to access the contents of arbitrary files on the affected device.
Published: 2019-04-26T01:39:22.000Z
Updated: 2024-11-15T15:26:56.601Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11510 vulnerable 2026-06-08 05:12:37.411338 Details available
CRITICAL (9.9)
In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnerability .
Published: 2019-05-08T16:18:28.000Z
Updated: 2025-10-21T23:45:37.755Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11509 vulnerable 2026-06-08 05:12:37.383300 Details available
In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4 and Pulse Policy Secure (PPS) before 5.1R15.1, 5.2 before 5.2R12.1, 5.3 before 5.3R15.1, 5.4 before 5.4R7.1, and 9.0 before 9.0R3.2, an authenticated attacker (via the admin web interface) can exploit Incorrect Access Control to execute arbitrary code on the appliance.
Published: 2019-06-03T19:34:46.000Z
Updated: 2024-08-04T22:55:40.698Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11508 vulnerable 2026-06-08 05:12:37.376428 Details available
HIGH (8.6)
In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an authenticated attacker (via the admin web interface) can exploit Directory Traversal to execute arbitrary code on the appliance.
Published: 2019-05-08T16:49:51.000Z
Updated: 2024-08-04T22:55:40.588Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11507 vulnerable 2026-06-08 05:12:37.304640 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20814 vulnerable 2026-06-08 05:11:28.094415 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20813 vulnerable 2026-06-08 05:11:28.093974 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20811 vulnerable 2026-06-08 05:11:28.058612 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20810 vulnerable 2026-06-08 05:11:28.057209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20809 vulnerable 2026-06-08 05:11:27.997902 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20808 vulnerable 2026-06-08 05:11:27.996968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20807 vulnerable 2026-06-08 05:11:27.995335 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.