Cross site scripting

2019-06-2818:15:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.8%

JSON

An XSS issue has been found in welcome.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.1.x before 8.1R12, 8.2.x before 8.2R9, and 8.3.x before 8.3R3 due to one of the URL parameters not being sanitized properly.

CPENameOperatorVersion
connect_secureeq8.1 r2.0
connect_secureeq8.1 r2.1
connect_secureeq8.1 r3.1
connect_secureeq8.1 r6.0
connect_secureeq8.1 r7.0
connect_secureeq8.1 r8.0
connect_secureeq8.1 r9.0
connect_secureeq8.1 r11.1
connect_secureeq8.2 r3.0
connect_secureeq8.2 r3.1

Name	Operator	Version
connect_secure	eq	8.1 r2.0
connect_secure	eq	8.1 r2.1
connect_secure	eq	8.1 r3.1
connect_secure	eq	8.1 r6.0
connect_secure	eq	8.1 r7.0
connect_secure	eq	8.1 r8.0
connect_secure	eq	8.1 r9.0
connect_secure	eq	8.1 r11.1
connect_secure	eq	8.2 r3.0
connect_secure	eq	8.2 r3.1