CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2020-8243

🔥 Known Exploited (CISA KEV)HIGH
7.2
CVSS Severity Score
EPSS Score86.1730%
EPSS Percentile90.94th
Published2020-09-30
Last Modified2025-12-18
Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to upload custom template to perform an arbitrary code execution.

Affected Platforms (CPE)

📦
Ivanti

Connect Secure

<= 9.0= 9.1
📦
Ivanti

Policy Secure

<= 9.0= 9.1

References & Advisories

🔗 https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44588
🔗 https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44588
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8243

相關漏洞威脅

CVE-2026-167284.8

undici's retry interceptor can deliver a response whose body length does not match the Content-Length header exposed to the applic...

CVE-2026-132687.8

G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local atta...

CVE-2026-672017.7

V through 0.5.2, fixed in commit 85859f0, contains a server-side request forgery (SSRF) bypass vulnerability that allows attackers...

CVE-2026-598986.3

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, ab attack...