Pulse Connect Secure Cross-Site Scripting Vulnerability (SA43018)

According to its self-reported version, the version of Pluse Connect Secure running on the remote host is affected by a cross-site scripting vulnerability in custompage.cgi. Refer to the vendor advisory for additional information. C Tenable Network Security, Inc. include"compat.inc"; if descripti...

CVE-2017-17947

CVE-2017-17947 is a cross-site scripting vulnerability in Pulse Secure’s Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS) affecting custompage.cgi. The issue arises from one unsanitized URL parameter, enabling injected script when the attacker is authenticated as an administrator; it does...

CVE-2017-17947: Improper Neutralization of Input During Web Page Generation

A cross site scripting issue has been found in custompage.cgi in Pulse Secure Pulse Connect Secure PCS before 8.0R17.0, 8.1.x before 8.1R13, 8.2.x before 8.2R9, and 8.3.x before 8.3R3 and Pulse Policy Secure PPS before 5.2R10, 5.3.x before 5.3R9, and 5.4.x before 5.4R3 due to one of the URL...

PT-2018-6597

Name of the Vulnerable Software and Affected Versions: Pulse Secure Pulse Connect Secure PCS versions 8.0R17.0 and earlier, 8.1.x through 8.1R12, 8.2.x through 8.2R8, 8.3.x through 8.3R2 Pulse Policy Secure PPS versions 5.2R9 and earlier, 5.3.x through 5.3R8, 5.4.x through 5.4R2 Description: A...