coldbraid

CVE-2019-11539 Ivanti Pulse Connect Secure And Pulse Policy Secure

Ivanti Pulse Connect Secure and Policy Secure allows an authenticated attacker from the admin web interface to inject and execute commands.

CVSS
not scored

CWE-78

On CISA’s exploited list

Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability

Added
2021-11-03
Federal patch deadline
2022-05-03
Ransomware use
known