CVE-2020-8256CWE-611

A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to gain arbitrary file reading access through…

published September 29, 2020

CVSS
—
EPSS
3%
Percentile
88.6
In the wild
Unconfirmed
What it is

A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to gain arbitrary file reading access through Pulse Collaboration via XML External Entity (XXE) vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03356 · 88.6th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2020-09-29T13:41Z
EPSS history
Timeline
  • 29 SEP 13:41Z
    A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to gain arbitrary file reading access through…
    cvelistv5