Approved changes feed: RSS · Atom

cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4:r1:*:*:*:*:*:*

part: a version: 5.4 update: r1

VendorPulsesecure (a066ac83-6375-5788-bb66-aece7b4a523c)
ProductPulse Policy Secure (2052ccab-5ceb-5dcd-867d-1dd85ab1b920)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-11509 vulnerable 2026-06-03 14:39:33.199556 Details available
In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4 and Pulse Policy Secure (PPS) before 5.1R15.1, 5.2 before 5.2R12.1, 5.3 before 5.3R15.1, 5.4 before 5.4R7.1, and 9.0 before 9.0R3.2, an authenticated attacker (via the admin web interface) can exploit Incorrect Access Control to execute arbitrary code on the appliance.
Published: 2019-06-03T19:34:46.000Z
Updated: 2024-08-04T22:55:40.698Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20814 vulnerable 2026-06-03 14:38:39.834740 Details available
An XSS issue was found with Psaldownload.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.3R2 before 8.3R2 and Pulse Policy Secure (PPS) 5.4RX before 5.4R2. This is not applicable to PCS 8.1RX or PPS 5.2RX.
Published: 2019-03-16T03:00:00.000Z
Updated: 2024-08-05T12:12:27.619Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20810 vulnerable 2026-06-03 14:38:39.801504 Details available
Session data between cluster nodes during cluster synchronization is not properly encrypted in Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R2 and Pulse Policy Secure (PPS) 5.4RX before 5.4R2. This is not applicable to PCS 8.1RX, PPS 5.2RX, or stand-alone devices.
Published: 2019-03-16T03:00:00.000Z
Updated: 2024-09-16T17:07:45.561Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20809 vulnerable 2026-06-03 14:38:39.799081 Details available
A crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R5 and Pulse Policy Secure 5.4RX before 5.4R5. This is not applicable to PCS 8.1RX.
Published: 2019-03-16T03:00:00.000Z
Updated: 2024-09-16T20:16:14.384Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.