Lucene search

K
cvelistMitreCVELIST:CVE-2020-15352
HistoryOct 27, 2020 - 4:10 a.m.

CVE-2020-15352

2020-10-2704:10:54
mitre
www.cve.org
6
xml external entity
pulse connect secure
pulse policy secure
remote authenticated
ssrf attacks
crafted dtd

AI Score

6.7

Confidence

High

EPSS

0.002

Percentile

61.7%

An XML external entity (XXE) vulnerability in Pulse Connect Secure (PCS) before 9.1R9 and Pulse Policy Secure (PPS) before 9.1R9 allows remote authenticated admins to conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.

AI Score

6.7

Confidence

High

EPSS

0.002

Percentile

61.7%

Related for CVELIST:CVE-2020-15352