CVE-2018-20807

An XSS issue has been found in welcome.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.1.x before 8.1R12, 8.2.x before 8.2R9, and 8.3.x before 8.3R3 due to one of the URL parameters not being sanitized properly.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-06-28

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Connect Secure (Ivanti)

References

• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43730/