CVE-2019-11507
50Vexday Risk Score
Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.
ssvc Actcvss 5.8epss 4.1%
de la publicación al arma
Publicada en NVD8 may
VulnCheck+397d
probabilidad de explotación
4.1%top 10% de las CVE
explotación observada
síVulnCheck
In Pulse Secure Pulse Connect Secure (PCS) 8.3.x before 8.3R7.1 and 9.0.x before 9.0R3, an XSS issue has been found on the Application Launcher page.
CVSS:3.0/AC:H/AV:N/A:L/C:L/I:L/PR:N/S:C/UI:R
Productos afectados
n/a · n/aReferencias
https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdfhttps://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101/https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516https://kb.pulsesecure.net/?atype=sahttps://www.kb.cert.org/vuls/id/927237http://www.securityfocus.com/bid/108073