CVE-2019-11508

In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an authenticated attacker (via the…

High · published May 8, 2019

CVSS v3.0

8.6

EPSS

15%

Percentile

96.7

In the wild

Unconfirmed

What it is

In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an authenticated attacker (via the admin web interface) can exploit Directory Traversal to execute arbitrary code on the appliance.

The record

Technical detail

CVSS v3.0: 8.6 · HIGH
Vector: CVSS:3.0/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:C/UI:N
CVSS v4.0: Not supplied
EPSS: 0.14690 · 96.7th percentile
Published: 2019-05-08T16:49Z

EPSS history

Timeline

08 MAY 16:49Z
In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an authenticated attacker (via the…
cvelistv5