CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-11540

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4 and 8.3RX before 8.3R7.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2 and 5.4RX before 5.4R7.1, an unauthenticated, remote attacker can conduct a session hijacking attack.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.227

EPSS Ranking 95.5%

CVSS Severity

CVSS v3 Score 8.3

CVSS v2 Score 7.5

References

Products affected by CVE-2019-11540

Ivanti » Connect Secure » Version: 8.3

cpe:2.3:a:ivanti:connect_secure:8.3
Pulsesecure » Pulse Connect Secure » Version: 8.3rx

cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3rx
Pulsesecure » Pulse Connect Secure » Version: 9.0r1

cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r1
Pulsesecure » Pulse Connect Secure » Version: 9.0r2

cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r2
Pulsesecure » Pulse Connect Secure » Version: 9.0r2.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r2.1
Pulsesecure » Pulse Connect Secure » Version: 9.0r3

cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r3
Pulsesecure » Pulse Connect Secure » Version: 9.0r3.1

cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r3.1
Pulsesecure » Pulse Connect Secure » Version: 9.0r3.2

cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r3.2
Pulsesecure » Pulse Connect Secure » Version: 9.0rx

cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0rx
Pulsesecure » Pulse Policy Secure » Version: 5.4r1

cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r1
Pulsesecure » Pulse Policy Secure » Version: 5.4r2

cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r2
Pulsesecure » Pulse Policy Secure » Version: 5.4r2.1

cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r2.1
Pulsesecure » Pulse Policy Secure » Version: 5.4r3

cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r3
Pulsesecure » Pulse Policy Secure » Version: 5.4r4

cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r4
Pulsesecure » Pulse Policy Secure » Version: 5.4r5

cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r5
Pulsesecure » Pulse Policy Secure » Version: 5.4r5.2

cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r5.2
Pulsesecure » Pulse Policy Secure » Version: 5.4r6

cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r6
Pulsesecure » Pulse Policy Secure » Version: 5.4r6.1

cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r6.1
Pulsesecure » Pulse Policy Secure » Version: 5.4r7

cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r7
Pulsesecure » Pulse Policy Secure » Version: 5.4rx

cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4rx
Pulsesecure » Pulse Policy Secure » Version: 9.0r1

cpe:2.3:a:pulsesecure:pulse_policy_secure:9.0r1
Pulsesecure » Pulse Policy Secure » Version: 9.0r2

cpe:2.3:a:pulsesecure:pulse_policy_secure:9.0r2
Pulsesecure » Pulse Policy Secure » Version: 9.0r2.1

cpe:2.3:a:pulsesecure:pulse_policy_secure:9.0r2.1
Pulsesecure » Pulse Policy Secure » Version: 9.0r3

cpe:2.3:a:pulsesecure:pulse_policy_secure:9.0r3
Pulsesecure » Pulse Policy Secure » Version: 9.0r3.1

cpe:2.3:a:pulsesecure:pulse_policy_secure:9.0r3.1
Pulsesecure » Pulse Policy Secure » Version: 9.0rx

cpe:2.3:a:pulsesecure:pulse_policy_secure:9.0rx

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-11540

Products

Pricing

Contact Us