CVE-2020-8238
published 2020-09-30CVE-2020-8238: A vulnerability in the authenticated user web interface of Pulse Connect Secure and Pulse Policy Secure < 9.1R8.2 could allow attackers to conduct Cross-Site…
PriorityP426medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EPSS
1.74%
74.9th percentile
A vulnerability in the authenticated user web interface of Pulse Connect Secure and Pulse Policy Secure < 9.1R8.2 could allow attackers to conduct Cross-Site Scripting (XSS).
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ivanti | connect_secure | — | — |
| ivanti | policy_secure | — | — |
| pulse_secure | pulse_connect_secure_pulse_policy_secure | — | — |
| pulsesecure | pulse_connect_secure | <= 9.0 | — |
| pulsesecure | pulse_policy_secure | <= 9.0 | — |
CVSS provenance
nvdv3.16.1MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-c27j-283m-6cf8: A vulnerability in the authenticated user web interface of Pulse Connect Secure and Pulse Policy Secure < 9
ghsa_unreviewed·2022-05-24
CVE-2020-8238 [MEDIUM] CWE-79 GHSA-c27j-283m-6cf8: A vulnerability in the authenticated user web interface of Pulse Connect Secure and Pulse Policy Secure < 9
A vulnerability in the authenticated user web interface of Pulse Connect Secure and Pulse Policy Secure < 9.1R8.2 could allow attackers to conduct Cross-Site Scripting (XSS).
Ivanti
Ivanti Security Advisory: CVE-2020-8238
vendor_ivanti·2020-09-30·CVSS 6.1
CVE-2020-8238 [MEDIUM] CWE-79 Ivanti Security Advisory: CVE-2020-8238
Ivanti Security Advisory: CVE-2020-8238
A vulnerability in the authenticated user web interface of Pulse Connect Secure and Pulse Policy Secure < 9.1R8.2 could allow attackers to conduct Cross-Site Scripting (XSS).
CVE IDs: CVE-2020-8238
CVSS Base Score: 6.1
Severity: MEDIUM
CWEs: CWE-79
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44588https://www.gosecure.net/blog/2020/11/13/forget-your-perimeter-part-2-four-vulnerabilities-in-pulse-connect-secure/https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44588https://www.gosecure.net/blog/2020/11/13/forget-your-perimeter-part-2-four-vulnerabilities-in-pulse-connect-secure/
2020-09-30
Published