CVE-2020-8218

No fix known ExploitedEPSS 32%CVSS 7.2

A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.

Published 2020-07-30 · In CISA KEV since 2022-03-07 · CVE record · OSV

Products: ivanti connect_secure, ivanti policy_secure, pulsesecure pulse_policy_secure