Approved changes feed: RSS · Atom

cpe:2.3:a:pulsesecure:pulse_secure_desktop_client:9.1:r4.1:*:*:*:windows:*:*

part: a version: 9.1 update: r4.1

VendorPulsesecure (a066ac83-6375-5788-bb66-aece7b4a523c)
ProductPulse Secure Desktop Client (a0587297-8d4a-54cd-b6ba-151eee6adc06)
Edition*
Language*
Software edition*
Target softwarewindows
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-8254 vulnerable 2026-06-03 14:43:08.507643 Details available
A vulnerability in the Pulse Secure Desktop Client < 9.1R9 has Remote Code Execution (RCE) if users can be convinced to connect to a malicious server. This vulnerability only affects Windows PDC.To improve the security of connections between Pulse clients and Pulse Connect Secure, see below recommendation(s):Disable Dynamic certificate trust for PDC.
Published: 2020-10-28T12:46:28.000Z
Updated: 2024-08-04T09:56:27.963Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8240 vulnerable 2026-06-03 14:43:08.473915 Details available
A vulnerability in the Pulse Secure Desktop Client < 9.1R9 allows a restricted user on an endpoint machine can use system-level privileges if the Embedded Browser is configured with Credential Provider. This vulnerability only affects Windows PDC if the Embedded Browser is configured with the Credential Provider.
Published: 2020-10-28T12:41:44.000Z
Updated: 2024-08-04T09:56:27.681Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-13162 vulnerable 2026-06-03 14:41:36.360261 Details available
A time-of-check time-of-use vulnerability in PulseSecureService.exe in Pulse Secure Client versions prior to 9.1.6 down to 5.3 R70 for Windows (which runs as NT AUTHORITY/SYSTEM) allows unprivileged users to run a Microsoft Installer executable with elevated privileges.
Published: 2020-06-16T19:41:18.000Z
Updated: 2025-05-05T17:08:09.077Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.