Pulse Secure Pulse Connect Secure Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Version

8.3R7	10
9.0R3.0	8
9.0R3.1	8
9.0R3.2	8
9.0R3.3	8

Remediation

Official Fix	24
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	4

Exploitability

High	2
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	26

Access Vector

Not Defined	0
Physical	0
Local	2
Adjacent	0
Network	26

Authentication

Not Defined	0
High	0
Low	4
None	24

User Interaction

Not Defined	0
Required	10
None	18

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	8
≤7	10
≤8	4
≤9	6
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	6
≤7	10
≤8	4
≤9	6
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	0
≤5	8
≤6	10
≤7	2
≤8	8
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	10
≤8	4
≤9	4
≤10	8

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	0
≤8	0
≤9	6
≤10	2

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	6
<2k	20
<5k	2
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Today

<1k	28
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Versions (21): 8.0R16, 8.1.R15, 8.1R11, 8.1R12, 8.1R13, 8.1R15, 8.2R8, 8.2R10, 8.2R12, 8.3R1, 8.3R2, 8.3R3, 8.3R4, 8.3R7, 9.0R2, 9.0R3, 9.0R3.1, 9.0R3.2, 9.0R3.3, 9.1R7, 2020-04-06

Published	Base	Temp	Vulnerability	0day	Today	Exp	Rem	CTI	CVE
07/28/2020	4.2	4.0	Pulse Secure Pulse Connect Secure Web Interface privileges management	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-15408
04/06/2020	7.0	7.0	Pulse Secure Pulse Connect Secure Applet tncc.jar excessive authentication	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2020-11582
04/06/2020	6.8	6.8	Pulse Secure Pulse Connect Secure Applet tncc.jar Runtime.getRuntime.exec os command injection	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-11581
04/06/2020	8.2	8.2	Pulse Secure Pulse Connect Secure Applet tncc.jar certificate validation	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2020-11580
06/28/2019	5.2	5.1	Pulse Secure Pulse Connect Secure/Pulse Policy Secure Psaldownload.cgi cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2018-20814
06/28/2019	9.8	9.4	Pulse Secure Pulse Connect Secure login_meeting.cgi input validation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2018-20813
06/28/2019	5.3	5.1	Pulse Secure Pulse Connect Secure RPC Service information disclosure	$0-$5k	$0-$5k	Not Defined	Official Fix	0.05	CVE-2018-20811
06/28/2019	7.7	7.4	Pulse Secure Pulse Connect Secure/Pulse Policy Secure Cluster Synchronization inadequate encryption	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2018-20810
06/28/2019	6.4	6.1	Pulse Secure Pulse Connect Secure/Pulse Policy Secure Web Server input validation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2018-20809
06/28/2019	5.2	4.9	Pulse Secure Pulse Connect Secure rd.cgi cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2018-20808