Cross site scripting

Pulse Connect Secure 8.3R1 has Reflected XSS in adminservercacertdetails.cgi. In the admin panel, the certid parameter of adminservercacertdetails.cgi is reflected in the application's response and is not properly sanitized, allowing an attacker to inject tags. An attacker could come up with clev...

CVE-2017-11194

Pulse Connect Secure 8.3R1 is affected by CVE-2017-11194: a reflected XSS in adminservercacertdetails.cgi where the certid parameter is reflected without proper sanitization, enabling crafted payloads that can inject HTML/tags and may lead to command-like actions in the user’s browser. The issue ...