2019-06-28 20:15:10 2019-07-08 16:46:03

An XSS issue has been found in welcome.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.1.x before 8.1R12, 8.2.x before 8.2R9, and 8.3.x before 8.3R3 due to one of the URL parameters not being sanitized properly.

Vector

NETWORK

Complexity

MEDIUM

Authentication

NONE

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE
Pulsesecure Pulse connect secure 8.1 R1.0 (not an official CPE) Pulsesecure Pulse connect secure 8.1 R1.1 (not an official CPE) Pulsesecure Pulse connect secure 8.1 R10.0 (not an official CPE) Pulsesecure Pulse connect secure 8.1 R11.0 (not an official CPE) Pulsesecure Pulse connect secure 8.1 R11.1 (not an official CPE) Pulsesecure Pulse connect secure 8.1 R2.0 (not an official CPE) Pulsesecure Pulse connect secure 8.1 R2.1 (not an official CPE) Pulsesecure Pulse connect secure 8.1 R3.1 (not an official CPE) Pulsesecure Pulse connect secure 8.1 R3.2 (not an official CPE) Pulsesecure Pulse connect secure 8.1 R4.0 (not an official CPE) Pulsesecure Pulse connect secure 8.1 R4.1 (not an official CPE) Pulsesecure Pulse connect secure 8.1 R5.0 (not an official CPE) Pulsesecure Pulse connect secure 8.1 R6.0 (not an official CPE) Pulsesecure Pulse connect secure 8.1 R7 (not an official CPE) Pulsesecure Pulse connect secure 8.1 R7.0 (not an official CPE) Pulsesecure Pulse connect secure 8.1 R8.0 (not an official CPE) Pulsesecure Pulse connect secure 8.1 R9.0 (not an official CPE) Pulsesecure Pulse connect secure 8.1 R9.1 (not an official CPE) Pulsesecure Pulse connect secure 8.1 R9.2 (not an official CPE) Pulsesecure Pulse connect secure 8.2 R1 (not an official CPE) Pulsesecure Pulse connect secure 8.2 R1.0 (not an official CPE) Pulsesecure Pulse connect secure 8.2 R1.1 (not an official CPE) Pulsesecure Pulse connect secure 8.2 R2.0 (not an official CPE) Pulsesecure Pulse connect secure 8.2 R3.0 (not an official CPE) Pulsesecure Pulse connect secure 8.2 R3.1 (not an official CPE) Pulsesecure Pulse connect secure 8.2 R4.0 (not an official CPE) Pulsesecure Pulse connect secure 8.2 R4.1 (not an official CPE) Pulsesecure Pulse connect secure 8.2 R5.0 (not an official CPE) Pulsesecure Pulse connect secure 8.2 R5.1 (not an official CPE) Pulsesecure Pulse connect secure 8.2 R6.0 (not an official CPE) Pulsesecure Pulse connect secure 8.2 R7.0 (not an official CPE) Pulsesecure Pulse connect secure 8.2 R7.1 (not an official CPE) Pulsesecure Pulse connect secure 8.2 R7.2 (not an official CPE) Pulsesecure Pulse connect secure 8.2 R8.0 (not an official CPE) Pulsesecure Pulse connect secure 8.2 R8.1 (not an official CPE) Pulsesecure Pulse connect secure 8.2 R8.2 (not an official CPE) Pulsesecure Pulse connect secure 8.3 R1 (not an official CPE) Pulsesecure Pulse connect secure 8.3 R2 (not an official CPE) Pulsesecure Pulse connect secure 8.3 R2.1 (not an official CPE)