CVE-2020-8261

MEDIUM

Pulse Connect Secure/Pulse Policy Secure <9.1R9 - Command Injection

Title source: llm

A vulnerability in the Pulse Connect Secure / Pulse Policy Secure < 9.1R9 is vulnerable to arbitrary cookie injection.

Core 1

Core References

Vendor Advisory x_refsource_misc

CVSS v3 4.3

EPSS 0.0061

EPSS Percentile 69.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CWE

CWE-120

Status published

Products (4)

ivanti/connect_secure 9.1 r1 (8 CPE variants)

ivanti/policy_secure 9.1 r1 (8 CPE variants)

pulsesecure/pulse_connect_secure < 9.1

pulsesecure/pulse_policy_secure < 9.1

Published Oct 28, 2020

Tracked Since Feb 18, 2026