NetSight
IP …
medium6.1

CVE-2019-11543

XSS exists in the admin web console in Pulse Secure Pulse Connect Secure (PCS) 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.1RX before 8.1R15.1 and Pulse …

Impact

XSS exists in the admin web console in Pulse Secure Pulse Connect Secure (PCS) 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, and 5.2RX before 5.2R12.1.

Affected products

VendorProductAffected versions
IvantiConnect Secure
Versions 8.1, 8.3
PulsesecurePulse Connect Secure
Versions 8.1r1.0, 8.1rx, 8.3rx, 9.0r1, 9.0r2, 9.0r2.1
PulsesecurePulse Policy Secure
Versions 5.2r1.0, 5.2r2.0, 5.2r3.0, 5.2r3.2, 5.2r4.0, 5.2r5.0

Weakness classification

CWE-79

References