CVE-2018-20814

MEDIUM

Pulse Connect Secure and Pulse Policy Secure - Cross-Site Scripting via Psaldownload.cgi

Title source: llm

Description

An XSS issue was found with Psaldownload.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.3R2 before 8.3R2 and Pulse Policy Secure (PPS) 5.4RX before 5.4R2. This is not applicable to PCS 8.1RX or PPS 5.2RX.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877/

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/109033

Scores

CVSS v3 6.1

EPSS 0.0010

EPSS Percentile 28.1%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-79

Status published

Products (2)

ivanti/connect_secure 8.3 r1

pulsesecure/pulse_policy_secure 5.4 r1

Published Jun 28, 2019

Tracked Since Feb 18, 2026