← KEV catalog
CISA known exploited vulnerability

CVE-2020-8218

Pulse Connect Secure Code Injection Vulnerability

SOURCE FACT

Pulse Secure · Pulse Connect Secure

A code injection vulnerability exists in Pulse Connect Secure that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.

Required action

Apply updates per vendor instructions.

CISA notes

https://nvd.nist.gov/vuln/detail/CVE-2020-8218

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

Could this product be present?