# Pulse Connect Secure.

Every CVE that names Pulse Connect Secure among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Uncontrolled resource consumption in Pulse Connect Secure](https://agentprime.io/advisories/CVE-2021-22965.md)
  `CVE-2021-22965` · CVE record: Pulse Connect Secure · No CVSS score · Not analysed yet · Published 19 Nov 2021 · Tags: Denial of service
- [Unrestricted file upload in Pulse Connect Secure](https://agentprime.io/advisories/CVE-2021-22937.md)
  `CVE-2021-22937` · CVE record: Pulse Connect Secure · No CVSS score · Not analysed yet · Published 16 Aug 2021 · Tags: Unrestricted file upload
- [Cross-site scripting in Pulse Connect Secure](https://agentprime.io/advisories/CVE-2021-22936.md)
  `CVE-2021-22936` · CVE record: Pulse Connect Secure · No CVSS score · Not analysed yet · Published 16 Aug 2021 · Tags: Cross-site scripting (XSS)
- [Command injection in Pulse Connect Secure](https://agentprime.io/advisories/CVE-2021-22935.md)
  `CVE-2021-22935` · CVE record: Pulse Connect Secure · No CVSS score · Not analysed yet · Published 16 Aug 2021 · Tags: Command injection
- [Buffer overflow in Pulse Connect Secure](https://agentprime.io/advisories/CVE-2021-22934.md)
  `CVE-2021-22934` · CVE record: Pulse Connect Secure · No CVSS score · Not analysed yet · Published 16 Aug 2021 · Tags: Memory corruption
- [Command injection in Pulse Connect Secure](https://agentprime.io/advisories/CVE-2021-22938.md)
  `CVE-2021-22938` · CVE record: Pulse Connect Secure · No CVSS score · Not analysed yet · Published 16 Aug 2021 · Tags: Command injection
- [Path traversal in Pulse Connect Secure](https://agentprime.io/advisories/CVE-2021-22933.md)
  `CVE-2021-22933` · CVE record: Pulse Connect Secure · No CVSS score · Not analysed yet · Published 16 Aug 2021 · Tags: Path traversal
- [Command injection in Pulse Connect Secure](https://agentprime.io/advisories/CVE-2021-22899.md)
  `CVE-2021-22899` · CVE record: Pulse Connect Secure · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.23 · Not analysed yet · Published 27 May 2021 · Tags: Command injection
- [Code injection in Pulse Connect Secure](https://agentprime.io/advisories/CVE-2021-22894.md)
  `CVE-2021-22894` · CVE record: Pulse Connect Secure · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.41 · Not analysed yet · Published 27 May 2021 · Tags: Code injection
- [Buffer overflow in Pulse Connect Secure](https://agentprime.io/advisories/CVE-2021-22908.md)
  `CVE-2021-22908` · CVE record: Pulse Connect Secure · No CVSS score · EPSS 0.69 · Not analysed yet · Published 27 May 2021 · Tags: Memory corruption
- [Improper authentication in Pulse Connect Secure](https://agentprime.io/advisories/CVE-2021-22893.md)
  `CVE-2021-22893` · CVE record: Pulse Connect Secure · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.48 · Not analysed yet · Published 23 Apr 2021 · Tags: Authentication bypass
- [XML external entity injection in Pulse Connect Secure](https://agentprime.io/advisories/CVE-2020-8256.md)
  `CVE-2020-8256` · CVE record: Pulse Connect Secure · No CVSS score · Not analysed yet · Published 29 Sept 2020 · Tags: XML external entities (XXE)
- [Path traversal in Pulse Connect Secure](https://agentprime.io/advisories/CVE-2020-8222.md)
  `CVE-2020-8222` · CVE record: Pulse Connect Secure · No CVSS score · Not analysed yet · Published 30 Jul 2020 · Tags: Path traversal
- [Path traversal in Pulse Connect Secure](https://agentprime.io/advisories/CVE-2020-8221.md)
  `CVE-2020-8221` · CVE record: Pulse Connect Secure · No CVSS score · Not analysed yet · Published 30 Jul 2020 · Tags: Path traversal
- [Uncontrolled resource consumption in Pulse Connect Secure](https://agentprime.io/advisories/CVE-2020-8220.md)
  `CVE-2020-8220` · CVE record: Pulse Connect Secure · No CVSS score · Not analysed yet · Published 30 Jul 2020 · Tags: Denial of service
- [Pulse Connect Secure: An insufficient permission check vulnerability exists in Pulse Connect Secure <9.1R8 that…](https://agentprime.io/advisories/CVE-2020-8219.md)
  `CVE-2020-8219` · CVE record: Pulse Connect Secure · No CVSS score · Not analysed yet · Published 30 Jul 2020 · Tags: CWE-280
- [Code injection in Pulse Connect Secure](https://agentprime.io/advisories/CVE-2020-8218.md)
  `CVE-2020-8218` · CVE record: Pulse Connect Secure · CVSS 7.2 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.32 · Not analysed yet · Published 30 Jul 2020 · Tags: Code injection
- [Cross-site scripting in Pulse Connect Secure](https://agentprime.io/advisories/CVE-2020-8217.md)
  `CVE-2020-8217` · CVE record: Pulse Connect Secure · No CVSS score · Not analysed yet · Published 30 Jul 2020 · Tags: Cross-site scripting (XSS)
- [Information disclosure in Pulse Connect Secure](https://agentprime.io/advisories/CVE-2020-8216.md)
  `CVE-2020-8216` · CVE record: Pulse Connect Secure · No CVSS score · Not analysed yet · Published 30 Jul 2020 · Tags: Information disclosure
- [Improper authentication in Pulse Connect Secure](https://agentprime.io/advisories/CVE-2020-8206.md)
  `CVE-2020-8206` · CVE record: Pulse Connect Secure · No CVSS score · Not analysed yet · Published 30 Jul 2020 · Tags: Authentication bypass
- [Cross-site scripting in Pulse Connect Secure](https://agentprime.io/advisories/CVE-2020-8204.md)
  `CVE-2020-8204` · CVE record: Pulse Connect Secure · No CVSS score · Not analysed yet · Published 30 Jul 2020 · Tags: Cross-site scripting (XSS)

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=pulse-connect-secure>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/pulse-connect-secure/>. Everything for agents: <https://agentprime.io/llms.txt>.