CVE-2020-8217

No fix known EPSS 1%

A cross site scripting (XSS) vulnerability in Pulse Connect Secure <9.1R8 allowed attackers to exploit in the URL used for Citrix ICA.

Published 2020-07-30 · CVE record · OSV

Products: ivanti connect_secure, pulsesecure pulse_connect_secure, ivanti policy_secure, pulsesecure pulse_policy_secure