CVE-2020-8243

No fix known ExploitedEPSS 91%CVSS 7.2

A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to upload custom template to perform an arbitrary code execution.

Published 2020-09-29 · In CISA KEV since 2021-11-03 · CVE record · OSV

Products: ivanti connect_secure, ivanti policy_secure