[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$feNL9W0DARIlxIu_-LyaGYtZ0U21mt4Ix64-vuwnp1AA":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":102,"kevVulnerabilities":161,"topProductsByCves":177,"seoMetadata":188,"meta":197},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":101},25888,"pulsesecure",20,93,3,453,"2022-09-30","p",[16,22,29,35,40,45,49,53,56,60,64,68,72,76,80,84,88,91,94,97],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":13},131196,"pulse_connect_secure",119,57,1,{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":27,"last_cve_update":28},131198,"pulse_policy_secure",82,31,2,"2020-10-28",{"id":30,"product_name":31,"version_count":32,"cve_count":33,"kev_count":34,"last_cve_update":28},131200,"pulse_secure_desktop_client",69,18,0,{"id":36,"product_name":37,"version_count":38,"cve_count":11,"kev_count":34,"last_cve_update":39},131207,"virtual_traffic_manager",14,"2021-05-14",{"id":41,"product_name":42,"version_count":43,"cve_count":11,"kev_count":34,"last_cve_update":44},131199,"pulse_secure_desktop",60,"2020-10-27",{"id":46,"product_name":47,"version_count":34,"cve_count":27,"kev_count":34,"last_cve_update":48},131203,"pulse_secure_virtual_application_delivery_controller","2019-06-19",{"id":50,"product_name":51,"version_count":34,"cve_count":27,"kev_count":34,"last_cve_update":52},131188,"client","2016-03-03",{"id":54,"product_name":55,"version_count":34,"cve_count":27,"kev_count":34,"last_cve_update":52},131206,"steel_belted_radius",{"id":57,"product_name":58,"version_count":21,"cve_count":21,"kev_count":34,"last_cve_update":59},131191,"odyssey_access_client","2016-08-02",{"id":61,"product_name":62,"version_count":21,"cve_count":21,"kev_count":34,"last_cve_update":63},131197,"pulse_one_on-premise","2017-09-30",{"id":65,"product_name":66,"version_count":27,"cve_count":21,"kev_count":34,"last_cve_update":67},131190,"desktop_linux_client","2018-01-31",{"id":69,"product_name":70,"version_count":27,"cve_count":21,"kev_count":34,"last_cve_update":71},131201,"pulse_secure_installer_service","2020-06-16",{"id":73,"product_name":74,"version_count":75,"cve_count":21,"kev_count":34,"last_cve_update":59},131202,"pulse_secure_security",39,{"id":77,"product_name":78,"version_count":27,"cve_count":21,"kev_count":34,"last_cve_update":79},131204,"secure_access_series_ssl_vpn_sa-4000","2018-12-21",{"id":81,"product_name":82,"version_count":83,"cve_count":21,"kev_count":34,"last_cve_update":59},131205,"standalone_pulse_installer_service",62,{"id":85,"product_name":86,"version_count":34,"cve_count":21,"kev_count":34,"last_cve_update":87},131193,"psa-5000_firmware","2021-03-16",{"id":89,"product_name":90,"version_count":34,"cve_count":21,"kev_count":34,"last_cve_update":87},131194,"psa-7000",{"id":92,"product_name":93,"version_count":34,"cve_count":21,"kev_count":34,"last_cve_update":87},131195,"psa-7000_firmware",{"id":95,"product_name":96,"version_count":34,"cve_count":21,"kev_count":34,"last_cve_update":87},131192,"psa-5000",{"id":98,"product_name":99,"version_count":34,"cve_count":34,"kev_count":34,"last_cve_update":100},131189,"connect_secure",null,"Pulsesecure is a technology vendor with 20 tracked products and 93 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[103,111,117,122,129,135,139,144,150,155],{"cveId":104,"description":105,"publishedDate":48,"cvssScore":106,"cvssVersion":107,"severity":108,"isKev":109,"epssScore":110},"CVE-2019-11477","Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff.",7.5,"v3.1","High",false,0.98745,{"cveId":112,"description":113,"publishedDate":114,"cvssScore":115,"cvssVersion":107,"severity":108,"isKev":4,"epssScore":116},"CVE-2019-11539","In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.","2019-04-26",7.2,0.98544,{"cveId":118,"description":119,"publishedDate":48,"cvssScore":106,"cvssVersion":120,"severity":108,"isKev":109,"epssScore":121},"CVE-2019-11478","Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit f070ef2ac66716357066b683fb0baf55f8191a2e.","v3.0",0.94686,{"cveId":123,"description":124,"publishedDate":125,"cvssScore":126,"cvssVersion":120,"severity":127,"isKev":109,"epssScore":128},"CVE-2016-0800","The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a \"DROWN\" attack.","2016-03-01",5.9,"Medium",0.82112,{"cveId":130,"description":131,"publishedDate":132,"cvssScore":133,"cvssVersion":107,"severity":108,"isKev":109,"epssScore":134},"CVE-2021-22908","A buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to browse SMB shares to execute arbitrary code as the root user. As of version 9.1R3, this permission is not enabled by default.","2021-05-27",8.8,0.69377,{"cveId":136,"description":137,"publishedDate":114,"cvssScore":115,"cvssVersion":107,"severity":108,"isKev":109,"epssScore":138},"CVE-2019-11542","In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, an authenticated attacker (via the admin web interface) can send a specially crafted message resulting in a stack buffer overflow.",0.6559,{"cveId":140,"description":141,"publishedDate":13,"cvssScore":142,"cvssVersion":107,"severity":127,"isKev":109,"epssScore":143},"CVE-2022-21826","Pulse Secure version 9.115 and below may be susceptible to client-side http request smuggling, When the application receives a POST request, it ignores the request's Content-Length header and leaves the POST body on the TCP\u002FTLS socket. This body ends up prefixing the next HTTP request sent down that connection, this means when someone loads website attacker may be able to make browser issue a POST to the application, enabling XSS.",5.4,0.45229,{"cveId":145,"description":146,"publishedDate":52,"cvssScore":147,"cvssVersion":120,"severity":148,"isKev":109,"epssScore":149},"CVE-2016-0799","The fmtstr function in crypto\u002Fbio\u002Fb_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, which allows remote attackers to cause a denial of service (overflow and out-of-bounds read) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-2842.",9.8,"Critical",0.32414,{"cveId":151,"description":152,"publishedDate":153,"cvssScore":115,"cvssVersion":107,"severity":108,"isKev":4,"epssScore":154},"CVE-2020-8218","A code injection vulnerability exists in Pulse Connect Secure \u003C9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.","2020-07-30",0.3225,{"cveId":156,"description":157,"publishedDate":158,"cvssScore":159,"cvssVersion":120,"severity":108,"isKev":109,"epssScore":160},"CVE-2018-18284","Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving the 1Policy operator.","2018-10-19",8.6,0.16288,[162,167,171],{"cveId":151,"description":152,"publishedDate":153,"cvssScore":115,"cvssVersion":107,"severity":108,"isKev":4,"epssScore":154,"cisaVulnName":163,"cisaDateAdded":164,"cisaShortDescription":165,"cisaRequiredAction":166},"Pulse Connect Secure Code Injection Vulnerability","2022-03-07","A code injection vulnerability exists in Pulse Connect Secure that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.","Apply updates per vendor instructions.",{"cveId":112,"description":113,"publishedDate":114,"cvssScore":115,"cvssVersion":107,"severity":108,"isKev":4,"epssScore":116,"cisaVulnName":168,"cisaDateAdded":169,"cisaShortDescription":170,"cisaRequiredAction":166},"Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability","2021-11-03","Ivanti Pulse Connect Secure and Policy Secure allows an authenticated attacker from the admin web interface to inject and execute commands.",{"cveId":172,"description":173,"publishedDate":132,"cvssScore":115,"cvssVersion":107,"severity":108,"isKev":4,"epssScore":174,"cisaVulnName":175,"cisaDateAdded":169,"cisaShortDescription":176,"cisaRequiredAction":166},"CVE-2021-22900","A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.",0.14146,"Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability","Ivanti Pulse Connect Secure contains an unrestricted file upload vulnerability that allows an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.",[178,179,180,181,182,183,184,185,186,187],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":13},{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":27,"last_cve_update":28},{"id":30,"product_name":31,"version_count":32,"cve_count":33,"kev_count":34,"last_cve_update":28},{"id":36,"product_name":37,"version_count":38,"cve_count":11,"kev_count":34,"last_cve_update":39},{"id":41,"product_name":42,"version_count":43,"cve_count":11,"kev_count":34,"last_cve_update":44},{"id":46,"product_name":47,"version_count":34,"cve_count":27,"kev_count":34,"last_cve_update":48},{"id":50,"product_name":51,"version_count":34,"cve_count":27,"kev_count":34,"last_cve_update":52},{"id":54,"product_name":55,"version_count":34,"cve_count":27,"kev_count":34,"last_cve_update":52},{"id":57,"product_name":58,"version_count":21,"cve_count":21,"kev_count":34,"last_cve_update":59},{"id":61,"product_name":62,"version_count":21,"cve_count":21,"kev_count":34,"last_cve_update":63},{"title":189,"metaDescription":190,"keywords":191,"structuredData":192},"Pulsesecure - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Pulsesecure covering 20 products with 93 tracked vulnerabilities including 0 critical and 3 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Pulsesecure vulnerabilities, Pulsesecure security, Pulsesecure CVE, Pulsesecure threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Pulsesecure KEV, Pulsesecure exploited vulnerabilities",{"@context":193,"@type":194,"name":195,"description":190,"url":196},"https:\u002F\u002Fschema.org","Organization","Pulsesecure","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fpulsesecure",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":198,"apiVersion":199},"2026-10-17T13:28:05.280Z","3.0"]