Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2019-11540

πŸ—“οΈΒ 26 Apr 2019Β 01:39:49Reported byΒ mitreTypeΒ 
cve
Β cveπŸ”—Β web.nvd.nist.govπŸ‘Β 95Β Views

Pulse Secure, Pulse Connect Secure and Pulse Policy Secure versions before 9.0R3.4, 8.3R7.1, 9.0R3.2, and 5.4R7.1 allow unauthenticated remote attackers to conduct session hijacking

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Circl		CVE-2019-11540
20 Jan 202013:11
–circl
Cvelist		CVE-2019-11540
26 Apr 201901:39
–cvelist
Hacker One		X (Formerly Twitter): Potential pre-auth RCE on Twitter VPN
28 May 201907:53
–hackerone
Hacker One		Uber: Arbitrary File Reading on Uber SSL VPN
17 Jun 201918:51
–hackerone
Hacker One		U.S. Dept Of Defense: Arbitrary File Reading leads to RCE in the Pulse Secure SSL VPN on the https://β–ˆβ–ˆβ–ˆ
21 Aug 201913:03
–hackerone
Hacker One		U.S. Dept Of Defense: Arbitrary File Reading leads to RCE in the Pulse Secure SSL VPN on the https://β–ˆβ–ˆβ–ˆβ–ˆ
14 Sep 201922:51
–hackerone
Hacker One		U.S. Dept Of Defense: Arbitrary File Reading leads to RCE in the Pulse Secure SSL VPN on the https://β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆ (β–ˆβ–ˆβ–ˆ)
17 Sep 201907:31
–hackerone
Ivanti		SA44101 - 2019-04: Out-of-Cycle Advisory: Multiple vulnerabilities resolved in Pulse Connect Secure / Pulse Policy Secure 9.0RX
14 Feb 202307:22
–ivanti
myhack58		Pulse Secure SSL VPN vulnerability alerts-a vulnerability alert-the black bar safety net
27 Aug 201900:00
–myhack58
NVD		CVE-2019-11540
26 Apr 201902:29
–nvd
Rows per page
NVD
Node
ivanticonnect_secureMatch8.3
OR
pulsesecurepulse_connect_secureMatch8.3rx
OR
pulsesecurepulse_connect_secureMatch9.0r1
OR
pulsesecurepulse_connect_secureMatch9.0r2
OR
pulsesecurepulse_connect_secureMatch9.0r2.1
OR
pulsesecurepulse_connect_secureMatch9.0r3
OR
pulsesecurepulse_connect_secureMatch9.0r3.1
OR
pulsesecurepulse_connect_secureMatch9.0r3.2
OR
pulsesecurepulse_connect_secureMatch9.0rx
OR
pulsesecurepulse_policy_secureMatch5.4r1
OR
pulsesecurepulse_policy_secureMatch5.4r2
OR
pulsesecurepulse_policy_secureMatch5.4r2.1
OR
pulsesecurepulse_policy_secureMatch5.4r3
OR
pulsesecurepulse_policy_secureMatch5.4r4
OR
pulsesecurepulse_policy_secureMatch5.4r5
OR
pulsesecurepulse_policy_secureMatch5.4r5.2
OR
pulsesecurepulse_policy_secureMatch5.4r6
OR
pulsesecurepulse_policy_secureMatch5.4r6.1
OR
pulsesecurepulse_policy_secureMatch5.4r7
OR
pulsesecurepulse_policy_secureMatch5.4rx
OR
pulsesecurepulse_policy_secureMatch9.0r1
OR
pulsesecurepulse_policy_secureMatch9.0r2
OR
pulsesecurepulse_policy_secureMatch9.0r2.1
OR
pulsesecurepulse_policy_secureMatch9.0r3
OR
pulsesecurepulse_policy_secureMatch9.0r3.1
OR
pulsesecurepulse_policy_secureMatch9.0rx

Data

Build on a solid foundation withΒ Vulners data

WeΒ provide theΒ essential building blocks forΒ cybersecurity solutions withΒ comprehensive, structured, andΒ constantly updated vulnerability andΒ exploits data

Api

Power your application withΒ Vulners API

The Vulners REST API offers reliable, high-performance access toΒ vulnerabilityΒ intelligence, withΒ 99.9%Β SLAΒ uptime andΒ CDN-backed data delivery forΒ seamlessΒ global access

App

Assess and manage vulnerabilities withΒ VulnersΒ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 02:13Current
9.3High risk
Vulners AI Score9.3
CVSS 27.5
CVSS 3.19.8
CVSS 38.3
EPSS0.08259
cve-2019-11540pulse securepulse connect securepulse policy securesession hijackingremote attackvulnerability
95