medium5.4
CVE-2020-8217
A cross site scripting (XSS) vulnerability in Pulse Connect Secure <9.1R8 allowed attackers to exploit in the URL used for Citrix ICA.
Impact
A cross site scripting (XSS) vulnerability in Pulse Connect Secure <9.1R8 allowed attackers to exploit in the URL used for Citrix ICA.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Connect Secure | Version 9.1 |
| Pulsesecure | Pulse Connect Secure | through 9.0 |
| Ivanti | Policy Secure | Version 9.1 |
| Pulsesecure | Pulse Policy Secure | through 9.0 |