CVE-2018-20306: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the web administration user interface of Pulse Secure Virtual Traffic Manager may allow a remote authenticated attacker to inject web script or HTML via a crafted website and steal sensitive data and credentials. Affected releases are Pulse Secur...

PT-2018-15305

Name of the Vulnerable Software and Affected Versions Pulse Secure Virtual Traffic Manager versions prior to 9.9r2 Pulse Secure Virtual Traffic Manager version 10.4r1 Description A stored cross-site scripting XSS issue in the web administration user interface may allow a remote authenticated...