coldbraid

CVE-2020-8218 Pulse Secure Pulse Connect Secure

A code injection vulnerability exists in Pulse Connect Secure that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.

CVSS
not scored

CWE-94

On CISA’s exploited list

Pulse Connect Secure Code Injection Vulnerability

Added
2022-03-07
Federal patch deadline
2022-09-07
Ransomware use
not known