Advisories · Technology

Pulse Connect Secure.

Every CVE that names Pulse Connect Secure among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-22965 CVE record

Uncontrolled resource consumption in Pulse Connect Secure
- Pulse Connect Secure
- Denial of service
Not analysed yet 19 Nov 2021
CVE-2021-22937 CVE record

Unrestricted file upload in Pulse Connect Secure
- Pulse Connect Secure
- Unrestricted file upload
Not analysed yet 16 Aug 2021
CVE-2021-22936 CVE record

Cross-site scripting in Pulse Connect Secure
- Pulse Connect Secure
- Cross-site scripting (XSS)
Not analysed yet 16 Aug 2021
CVE-2021-22935 CVE record

Command injection in Pulse Connect Secure
- Pulse Connect Secure
- Command injection
Not analysed yet 16 Aug 2021
CVE-2021-22934 CVE record

Buffer overflow in Pulse Connect Secure
- Pulse Connect Secure
- Memory corruption
Not analysed yet 16 Aug 2021
CVE-2021-22938 CVE record

Command injection in Pulse Connect Secure
- Pulse Connect Secure
- Command injection
Not analysed yet 16 Aug 2021
CVE-2021-22933 CVE record

Path traversal in Pulse Connect Secure
- Pulse Connect Secure
- Path traversal
Not analysed yet 16 Aug 2021
CVE-2021-22899 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Command injection in Pulse Connect Secure
- Pulse Connect Secure
- Command injection
Not analysed yet 27 May 2021
CVE-2021-22894 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Code injection in Pulse Connect Secure
- Pulse Connect Secure
- Code injection
Not analysed yet 27 May 2021
CVE-2021-22908 CVE record

Buffer overflow in Pulse Connect Secure
- Pulse Connect Secure
- Memory corruption
Not analysed yet 27 May 2021
CVE-2021-22893 CVE record

CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Improper authentication in Pulse Connect Secure
- Pulse Connect Secure
- Authentication bypass
Not analysed yet 23 Apr 2021
CVE-2020-8256 CVE record

XML external entity injection in Pulse Connect Secure
- Pulse Connect Secure
- XML external entities (XXE)
Not analysed yet 29 Sept 2020
CVE-2020-8222 CVE record

Path traversal in Pulse Connect Secure
- Pulse Connect Secure
- Path traversal
Not analysed yet 30 Jul 2020
CVE-2020-8221 CVE record

Path traversal in Pulse Connect Secure
- Pulse Connect Secure
- Path traversal
Not analysed yet 30 Jul 2020
CVE-2020-8220 CVE record

Uncontrolled resource consumption in Pulse Connect Secure
- Pulse Connect Secure
- Denial of service
Not analysed yet 30 Jul 2020
CVE-2020-8219 CVE record

Pulse Connect Secure: An insufficient permission check vulnerability exists in Pulse Connect Secure <9.1R8 that…
- Pulse Connect Secure
- CWE-280
Not analysed yet 30 Jul 2020
CVE-2020-8218 CVE record

CVSS 7.2 HighCritical · KEV, CVSS 7+ and EPSSKEV

Code injection in Pulse Connect Secure
- Pulse Connect Secure
- Code injection
Not analysed yet 30 Jul 2020
CVE-2020-8217 CVE record

Cross-site scripting in Pulse Connect Secure
- Pulse Connect Secure
- Cross-site scripting (XSS)
Not analysed yet 30 Jul 2020
CVE-2020-8216 CVE record

Information disclosure in Pulse Connect Secure
- Pulse Connect Secure
- Information disclosure
Not analysed yet 30 Jul 2020
CVE-2020-8206 CVE record

Improper authentication in Pulse Connect Secure
- Pulse Connect Secure
- Authentication bypass
Not analysed yet 30 Jul 2020
CVE-2020-8204 CVE record

Cross-site scripting in Pulse Connect Secure
- Pulse Connect Secure
- Cross-site scripting (XSS)
Not analysed yet 30 Jul 2020