RSS   Podatności dla 'Pulse policy secure'   RSS

2020-10-28
 
CVE-2020-8262

CWE-79
 
 
A vulnerability in the Pulse Connect Secure / Pulse Policy Secure below 9.1R9 could allow attackers to conduct Cross-Site Scripting (XSS) and Open Redirection for authenticated user web interface.

 
 
CVE-2020-8261

CWE-120
 
 
A vulnerability in the Pulse Connect Secure / Pulse Policy Secure < 9.1R9 is vulnerable to arbitrary cookie injection.

 
2020-10-27
 
CVE-2020-15352

CWE-611
 
 
An XML external entity (XXE) vulnerability in Pulse Connect Secure (PCS) before 9.1R9 and Pulse Policy Secure (PPS) before 9.1R9 allows remote authenticated admins to conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.

 
2020-09-30
 
CVE-2020-8243

CWE-94
 
 
A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to upload custom template to perform an arbitrary code execution.

 
 
CVE-2020-8238

CWE-79
 
 
A vulnerability in the authenticated user web interface of Pulse Connect Secure and Pulse Policy Secure < 9.1R8.2 could allow attackers to conduct Cross-Site Scripting (XSS).

 
2020-07-30
 
CVE-2020-8222

CWE-22
 
 
A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 that allowed an authenticated attacker via the administrator web interface to perform an arbitrary file reading vulnerability through Meeting.

 
 
CVE-2020-8221

CWE-22
 
 
A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 which allows an authenticated attacker to read arbitrary files via the administrator web interface.

 
 
CVE-2020-8220

CWE-400
 
 
A denial of service vulnerability exists in Pulse Connect Secure <9.1R8 that allows an authenticated attacker to perform command injection via the administrator web which can cause DOS.

 
 
CVE-2020-8219

CWE-276
 
 
An insufficient permission check vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to change the password of a full administrator.

 
 
CVE-2020-8218

CWE-94
 
 
A code injection vulnerability exists in Pulse Connect Secure <9.1RB that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.

 

Copyright 2024, cxsecurity.com

 

Back to Top