CVE-2020-8260

No fix known ExploitedEPSS 96%CVSS 7.2

A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary code execution using uncontrolled gzip extraction.

Published 2020-10-28 · In CISA KEV since 2021-11-03 · CVE record · OSV

Products: ivanti connect_secure