CVE-2020-8243

Known Exploited (CISA KEV)HIGH

7.2

CVSS Severity Score

EPSS Score86.1730%

EPSS Percentile90.94th

Published2020年9月30日

Last Modified2025年12月18日

Vulnerability Description

A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to upload custom template to perform an arbitrary code execution.

Affected Platforms (CPE)

📦

Ivanti

Connect Secure

<= 9.0

📦

Ivanti

Connect Secure

= 9.1

📦

Ivanti

Connect Secure

= 9.1

📦

Ivanti

Connect Secure

= 9.1

📦

Ivanti

Connect Secure

= 9.1

📦

Ivanti

Connect Secure

= 9.1

📦

Ivanti

Connect Secure

= 9.1

📦

Ivanti

Connect Secure

= 9.1

📦

Ivanti

Connect Secure

= 9.1

📦

Ivanti

Connect Secure

= 9.1

📦

Ivanti

Connect Secure

= 9.1

📦

Ivanti

Connect Secure

= 9.1

📦

Ivanti

Connect Secure

= 9.1

📦

Ivanti

Connect Secure

= 9.1

📦

Ivanti

Policy Secure

<= 9.0

📦

Ivanti

Policy Secure

= 9.1

📦

Ivanti

Policy Secure

= 9.1

📦

Ivanti

Policy Secure

= 9.1

📦

Ivanti

Policy Secure

= 9.1

📦

Ivanti

Policy Secure

= 9.1

📦

Ivanti

Policy Secure

= 9.1

📦

Ivanti

Policy Secure

= 9.1

📦

Ivanti

Policy Secure

= 9.1

📦

Ivanti

Policy Secure

= 9.1

📦

Ivanti

Policy Secure

= 9.1

📦

Ivanti

Policy Secure

= 9.1

📦

Ivanti

Policy Secure

= 9.1

📦

Ivanti

Policy Secure

= 9.1

References & Advisories

🔗 https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44588

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8243

Vulnerability Description

Affected Platforms (CPE)

Connect Secure

Connect Secure

Connect Secure

Connect Secure

Connect Secure

Connect Secure

Connect Secure

Connect Secure

Connect Secure

Connect Secure

Connect Secure

Connect Secure

Connect Secure

Connect Secure

Policy Secure

Policy Secure

Policy Secure

Policy Secure

Policy Secure

Policy Secure

Policy Secure

Policy Secure

Policy Secure

Policy Secure

Policy Secure

Policy Secure

Policy Secure

Policy Secure

References & Advisories

関連する脆弱性情報