CVE-2020-8243

🗓️ 29 Sep 2020 13:44:31Reported by hackeroneType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 1068 Views

A vulnerability in Pulse Connect Secure < 9.1R8.2 admin web interface allowing arbitrary code execution

Reporter	Title	Published	Views	Family All 25
ICS	Exploitation of Pulse Connect Secure Vulnerabilities	24 Aug 202112:00	–	ics
ATTACKERKB	CVE-2020-8243	30 Sep 202000:00	–	attackerkb
Circl	CVE-2020-8243	21 Apr 202104:00	–	circl
CISA KEV Catalog	Ivanti Pulse Connect Secure Code Execution Vulnerability	3 Nov 202100:00	–	cisa_kev
Check Point Advisories	Pulse Connect Secure Command Injection (CVE-2020-8243)	22 Dec 202100:00	–	checkpoint_advisories
Cvelist	CVE-2020-8243	29 Sep 202013:44	–	cvelist
Ivanti	SA44588 - 2020-09: Out-of-Cycle Advisory: Multiple vulnerabilities resolved in Pulse Connect Secure / Pulse Policy Secure 9.1R8.2	14 Feb 202307:22	–	ivanti
Malwarebytes	Take action! Multiple Pulse Secure VPN vulnerabilities exploited in the wild	21 Apr 202118:12	–	malwarebytes
Microsoft Malware Protection	Ransomware-as-a-service: Understanding the cybercrime gig economy and how to protect yourself	9 May 202213:00	–	mmpc
Microsoft Secure	Ransomware-as-a-service: Understanding the cybercrime gig economy and how to protect yourself	9 May 202213:00	–	mssecure

NVD

Vulners

Node

ivanti connect_secureRange≤9.0

ivanti connect_secureMatch9.1-

ivanti connect_secureMatch9.1r1

ivanti connect_secureMatch9.1r2

ivanti connect_secureMatch9.1r3

ivanti connect_secureMatch9.1r4

ivanti connect_secureMatch9.1r4.1

ivanti connect_secureMatch9.1r4.2

ivanti connect_secureMatch9.1r4.3

ivanti connect_secureMatch9.1r5

ivanti connect_secureMatch9.1r6

ivanti connect_secureMatch9.1r7

ivanti connect_secureMatch9.1r8

ivanti connect_secureMatch9.1r8.1

ivanti policy_secureRange≤9.0

ivanti policy_secureMatch9.1-

ivanti policy_secureMatch9.1r1

ivanti policy_secureMatch9.1r2

ivanti policy_secureMatch9.1r3

ivanti policy_secureMatch9.1r4

ivanti policy_secureMatch9.1r4.1

ivanti policy_secureMatch9.1r4.2

ivanti policy_secureMatch9.1r4.3

ivanti policy_secureMatch9.1r5

ivanti policy_secureMatch9.1r6

ivanti policy_secureMatch9.1r7

ivanti policy_secureMatch9.1r8

ivanti policy_secureMatch9.1r8.1

[
  {
    "product": "Pulse Connect Secre",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in 9.1R8.2"
      }
    ]
  }
]

Source	Link
kb	www.kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44588
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

18 Dec 2025 02:00Current

8.1High risk

Vulners AI Score8.1

CVSS 26.5

CVSS 3.17.2

EPSS0.124

SSVC