[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkSkelAHbIDXzvL1lZf3-YfIEDd0GNlh885HRCQd5HsM":3,"g5a-risk:CVE-2019-11540":257},{"success":4,"data":5,"meta":255},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":51,"epssPercentile":27,"epssTimeSeries":52,"severity":53,"affectedProducts":54,"affectedProductsCount":132,"references":133,"referencesCount":41,"weaknesses":163,"weaknessesCount":167,"isActivelyExploited":168,"cisaInfo":27,"otxData":27,"relatedBlogPosts":169,"seoMetadata":170,"configurations":195,"relatedVendorCves":253,"notableEvents":254},"CVE-2019-11540","What is CVE-2019-11540?","In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4 and 8.3RX before 8.3R7.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2 and 5.4RX before 5.4R7.1, an unauthenticated, remote attacker can conduct a session hijacking attack.","In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4 and 8.3RX before 8.3R7.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2 and 5.4RX bef...","2019-04-26T02:29:00.36","2024-02-27T21:04:17.56",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":42,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":40,"ImpactScore":41},"cve@mitre.org","Secondary",{"Version":35,"VectorString":36,"AttackVector":21,"AttackComplexity":25,"PrivilegesRequired":23,"UserInteraction":37,"Scope":38,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":39,"BaseSeverity":25,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H","REQUIRED","CHANGED",8.3,1.6,6,[43],{"Source":17,"Type":18,"CVSSData":44,"BaseSeverity":25,"ExploitabilityScore":49,"ImpactScore":50,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":45,"VectorString":46,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":47,"IntegrityImpact":47,"AvailabilityImpact":47,"BaseScore":48,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.07741,[51,51,51,51,51,51,51],"Critical",[55,60,65,68,71,74,77,80,83,86,90,93,96,99,102,105,108,111,114,117,120,122,124,126,128,130],{"vendor":56,"product":57,"version":58,"criteria":59,"vulnerable":4},"ivanti","connect_secure","8.3","cpe:2.3:a:ivanti:connect_secure:8.3:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":63,"criteria":64,"vulnerable":4},"pulsesecure","pulse_connect_secure","8.3rx","cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3rx:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":66,"criteria":67,"vulnerable":4},"9.0r1","cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r1:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":69,"criteria":70,"vulnerable":4},"9.0r2","cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r2:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":72,"criteria":73,"vulnerable":4},"9.0r2.1","cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r2.1:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":75,"criteria":76,"vulnerable":4},"9.0r3","cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r3:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":78,"criteria":79,"vulnerable":4},"9.0r3.1","cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r3.1:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":81,"criteria":82,"vulnerable":4},"9.0r3.2","cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r3.2:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":84,"criteria":85,"vulnerable":4},"9.0rx","cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0rx:*:*:*:*:*:*:*",{"vendor":61,"product":87,"version":88,"criteria":89,"vulnerable":4},"pulse_policy_secure","5.4r1","cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r1:*:*:*:*:*:*:*",{"vendor":61,"product":87,"version":91,"criteria":92,"vulnerable":4},"5.4r2","cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r2:*:*:*:*:*:*:*",{"vendor":61,"product":87,"version":94,"criteria":95,"vulnerable":4},"5.4r2.1","cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r2.1:*:*:*:*:*:*:*",{"vendor":61,"product":87,"version":97,"criteria":98,"vulnerable":4},"5.4r3","cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r3:*:*:*:*:*:*:*",{"vendor":61,"product":87,"version":100,"criteria":101,"vulnerable":4},"5.4r4","cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r4:*:*:*:*:*:*:*",{"vendor":61,"product":87,"version":103,"criteria":104,"vulnerable":4},"5.4r5","cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r5:*:*:*:*:*:*:*",{"vendor":61,"product":87,"version":106,"criteria":107,"vulnerable":4},"5.4r5.2","cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r5.2:*:*:*:*:*:*:*",{"vendor":61,"product":87,"version":109,"criteria":110,"vulnerable":4},"5.4r6","cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r6:*:*:*:*:*:*:*",{"vendor":61,"product":87,"version":112,"criteria":113,"vulnerable":4},"5.4r6.1","cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r6.1:*:*:*:*:*:*:*",{"vendor":61,"product":87,"version":115,"criteria":116,"vulnerable":4},"5.4r7","cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r7:*:*:*:*:*:*:*",{"vendor":61,"product":87,"version":118,"criteria":119,"vulnerable":4},"5.4rx","cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4rx:*:*:*:*:*:*:*",{"vendor":61,"product":87,"version":66,"criteria":121,"vulnerable":4},"cpe:2.3:a:pulsesecure:pulse_policy_secure:9.0r1:*:*:*:*:*:*:*",{"vendor":61,"product":87,"version":69,"criteria":123,"vulnerable":4},"cpe:2.3:a:pulsesecure:pulse_policy_secure:9.0r2:*:*:*:*:*:*:*",{"vendor":61,"product":87,"version":72,"criteria":125,"vulnerable":4},"cpe:2.3:a:pulsesecure:pulse_policy_secure:9.0r2.1:*:*:*:*:*:*:*",{"vendor":61,"product":87,"version":75,"criteria":127,"vulnerable":4},"cpe:2.3:a:pulsesecure:pulse_policy_secure:9.0r3:*:*:*:*:*:*:*",{"vendor":61,"product":87,"version":78,"criteria":129,"vulnerable":4},"cpe:2.3:a:pulsesecure:pulse_policy_secure:9.0r3.1:*:*:*:*:*:*:*",{"vendor":61,"product":87,"version":84,"criteria":131,"vulnerable":4},"cpe:2.3:a:pulsesecure:pulse_policy_secure:9.0rx:*:*:*:*:*:*:*",26,[134,140,145,149,154,158],{"url":135,"source":136,"tags":137},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F108073","Securityfocus",[138,139],"Third Party Advisory","VDB Entry",{"url":141,"source":142,"tags":143},"https:\u002F\u002Fdevco.re\u002Fblog\u002F2019\u002F09\u002F02\u002Fattacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study\u002F","Devco",[144,138],"Exploit",{"url":146,"source":147,"tags":148},"https:\u002F\u002Fi.blackhat.com\u002FUSA-19\u002FWednesday\u002Fus-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf","Blackhat",[144,138],{"url":150,"source":151,"tags":152},"https:\u002F\u002Fkb.pulsesecure.net\u002Farticles\u002FPulse_Security_Advisories\u002FSA44101","Pulsesecure",[138,153],"Vendor Advisory",{"url":155,"source":156,"tags":157},"https:\u002F\u002Fpsirt.global.sonicwall.com\u002Fvuln-detail\u002FSNWLID-2019-0010","Sonicwall",[138],{"url":159,"source":160,"tags":161},"https:\u002F\u002Fwww.kb.cert.org\u002Fvuls\u002Fid\u002F927237","Cert",[138,162],"US Government Resource",[164],{"id":165,"name":165,"description":166},"Unknown","NVD-CWE-noinfo",1,false,[],{"title":171,"metaDescription":172,"keywords":173,"canonicalUrl":174,"structuredData":175},"What is CVE-2019-11540? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-11540, a critical severity cyber security vulnerability from 2019. In Pulse Secure Pulse Connect Secure version 9.0RX befo...","CVE-2019-11540, CVE-2019-11540 vulnerability, CVE-2019-11540 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, ivanti security, pulsesecure security, connect_secure vulnerability, pulse_connect_secure vulnerability, pulse_policy_secure vulnerability","\u002Fwhat-is\u002Fcve-2019-11540",{"@context":176,"@type":177,"headline":171,"description":172,"datePublished":10,"dateModified":11,"author":178,"publisher":182,"about":186,"mainEntityOfPage":190,"articleSection":193,"keywords":194},"https:\u002F\u002Fschema.org","TechArticle",{"@type":179,"name":180,"url":181},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":179,"name":180,"url":181,"logo":183},{"@type":184,"url":185},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":187,"name":6,"description":188,"additionalType":189},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":191,"@id":192},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-11540","Cybersecurity","CVE-2019-11540, CVE-2019-11540 vulnerability, CVE-2019-11540 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[196],{"Operator":27,"Negate":27,"Nodes":197},[198],{"Operator":199,"Negate":27,"CPEMatch":200},"OR",[201,203,205,207,209,211,213,215,217,219,221,223,225,227,229,231,233,235,237,239,241,243,245,247,249,251],{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":202,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"AB453513-AFEA-4E68-8441-3984E83FFB2F",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":204,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"DD77C208-DD3E-46BD-930F-93BB39799D08",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":206,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"47D68BA7-3626-4D54-B6B3-ED0C2F25ADC1",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":208,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"190F575A-E9D4-403B-9AAC-D665D80B37D3",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":210,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"37B522EA-2724-4D88-89FE-8A3E1297313E",{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":212,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"6444B34E-C3E3-4959-8C5D-ACF5FF65D2DE",{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":214,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"6DF9BB1A-07D4-4757-BC09-49CCC044CE92",{"Vulnerable":4,"Criteria":82,"MatchCriteriaID":216,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"0F4694C1-667B-4BAC-ABF1-92AE4FD26893",{"Vulnerable":4,"Criteria":85,"MatchCriteriaID":218,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"59FE2F01-1675-45FB-90ED-A7A8C3E79114",{"Vulnerable":4,"Criteria":89,"MatchCriteriaID":220,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"C7F2FFEC-F243-4D85-888E-339C60B3C0CE",{"Vulnerable":4,"Criteria":92,"MatchCriteriaID":222,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"6A841849-DA0E-4BAA-8807-F42481C9457D",{"Vulnerable":4,"Criteria":95,"MatchCriteriaID":224,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2EC5A497-1FA2-4AE4-A611-553129B9F78C",{"Vulnerable":4,"Criteria":98,"MatchCriteriaID":226,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"479B25A4-59AA-4FA4-B1CC-E06781D00962",{"Vulnerable":4,"Criteria":101,"MatchCriteriaID":228,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"91C0556B-2420-46F2-A08E-EC83DA514A69",{"Vulnerable":4,"Criteria":104,"MatchCriteriaID":230,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"479C0704-9FE5-42D6-8968-780391708F44",{"Vulnerable":4,"Criteria":107,"MatchCriteriaID":232,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"ABE3B07D-879B-4AF2-9AA7-D9F64A577373",{"Vulnerable":4,"Criteria":110,"MatchCriteriaID":234,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"497631E3-0E1F-4267-8ADA-7697FF0BF7EF",{"Vulnerable":4,"Criteria":113,"MatchCriteriaID":236,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"7FF444E5-2EEA-4223-85E1-B2EA6D0543E7",{"Vulnerable":4,"Criteria":116,"MatchCriteriaID":238,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"1DA2AD75-A6DD-48D0-83E7-A5F00F31C010",{"Vulnerable":4,"Criteria":119,"MatchCriteriaID":240,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"07A6F2EF-09AF-4DAA-A552-6111C51DD210",{"Vulnerable":4,"Criteria":121,"MatchCriteriaID":242,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"8C50D348-E894-4B8D-ACFF-DE04FB47A97B",{"Vulnerable":4,"Criteria":123,"MatchCriteriaID":244,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"436C11B9-1A19-4751-877C-104370C769A3",{"Vulnerable":4,"Criteria":125,"MatchCriteriaID":246,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"10F709A2-79F6-4912-9B81-6EBF9E0D438E",{"Vulnerable":4,"Criteria":127,"MatchCriteriaID":248,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B694A761-C3DC-41C9-8FFA-271950BEFE60",{"Vulnerable":4,"Criteria":129,"MatchCriteriaID":250,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"BE48A776-5899-47E8-8B1C-B046594E6084",{"Vulnerable":4,"Criteria":131,"MatchCriteriaID":252,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"BB7BB3D9-7259-4DF3-B408-AE421CE206D4",[],[],{"lastModified":11,"cacheTime":256,"version":45},1792243900861,{"score":258,"band":259,"action":260,"scoredAt":261},56,"Medium","Plan remediation","2026-10-16T06:46:04.586082+00:00"]