CVE-2019-11507
50Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actcvss 5.8epss 4.1%
da publicação à arma
Publicada no NVD8 de mai.
VulnCheck+397d
probabilidade de exploração
4.1%top 10% das CVEs
exploração observada
simVulnCheck
In Pulse Secure Pulse Connect Secure (PCS) 8.3.x before 8.3R7.1 and 9.0.x before 9.0R3, an XSS issue has been found on the Application Launcher page.
CVSS:3.0/AC:H/AV:N/A:L/C:L/I:L/PR:N/S:C/UI:R
Produtos afetados
n/a · n/aReferências
https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdfhttps://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101/https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516https://kb.pulsesecure.net/?atype=sahttps://www.kb.cert.org/vuls/id/927237http://www.securityfocus.com/bid/108073