Vulnerability-Lookup

CVE-2019-11539 (GCVE-0-2019-11539)

Vulnerability from cvelistv5 – Published: 2019-04-26 01:39 – Updated: 2025-10-21 23:45

CISA KEVIntel

Summary

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.

Severity

8 (High)


                        
                          CVSS:3.0/AC:H/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N

SSVC

Exploitation: active Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

n/a
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

mitre

References

10 references

URL	Tags
https://kb.pulsesecure.net/articles/Pulse_Securit…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/108073	vdb-entryx_refsource_BID
https://psirt.global.sonicwall.com/vuln-detail/SN…	x_refsource_CONFIRM
https://i.blackhat.com/USA-19/Wednesday/us-19-Tsa…	x_refsource_MISC
http://packetstormsecurity.com/files/154376/Pulse…	x_refsource_MISC
https://devco.re/blog/2019/09/02/attacking-ssl-vp…	x_refsource_MISC
https://www.kb.cert.org/vuls/id/927237	third-party-advisoryx_refsource_CERT-VN
http://packetstormsecurity.com/files/155277/Pulse…	x_refsource_MISC
http://packetstormsecurity.com/files/162092/Pulse…	x_refsource_MISC
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

CISA

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: 1bc09c6c-0e55-4f99-ac21-33bd0a9ee743

Vulnerability ID: CVE-2019-11539

Status: Confirmed

Status Updated: 2021-11-03 00:00 UTC

Exploited: Yes

Timestamps

First Seen: 2021-11-03

Asserted: 2021-11-03

Scope

Notes: KEV entry: Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability | Affected: Ivanti / Pulse Connect Secure and Pulse Policy Secure | Description: Ivanti Pulse Connect Secure and Policy Secure allows an authenticated attacker from the admin web interface to inject and execute commands. | Required action: Apply updates per vendor instructions. | Due date: 2022-05-03 | Known ransomware campaign use (KEV): Known | Notes (KEV): https://nvd.nist.gov/vuln/detail/CVE-2019-11539

Evidence

Type: Vendor Report

Signal: Successful Exploitation

Confidence: 80%

Source: cisa-kev

Details

Cwes	CWE-78
Feed	CISA Known Exploited Vulnerabilities Catalog
Product	Pulse Connect Secure and Pulse Policy Secure
Due Date	2022-05-03
Date Added	2021-11-03
Vendorproject	Ivanti
Vulnerabilityname	Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability
Knownransomwarecampaignuse	Known

References

CVE-2019-11539

Created: 2026-02-02 13:26 UTC | Updated: 2026-02-06 07:53 UTC

KEVIntel

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: 326a1afe-92d3-47c5-ac1d-07c4919bc863

Vulnerability ID: CVE-2019-11539

Status: Confirmed

Status Updated: 2021-11-03 00:00 UTC

Exploited: Yes

Timestamps

First Seen: 2021-11-03

Asserted: 2021-11-03

Scope

Notes: KEVIntel entry: In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse... | Affected: Pulse Secure / Pulse Connect Secure | CVSS: 8.0 (HIGH) | Used in malware: yes | Not yet in CISA KEV: False

Evidence

Type: Public Report

Signal: Confirmed Compromise

Confidence: 70%

Source: kevintel

Details

Feed	KEVIntel (kevintel.com)
Title	In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse...
Vendor	Pulse Secure
Product	Pulse Connect Secure
Added Date	2021-11-03T00:00:00.000Z
Cvss Score	8.0
Epss Score	None
Cvss Severity	HIGH
Epss Percentile	None
Used In Malware	yes
Ahead Of Cisa Kev	None
Not Yet In Cisa Kev	False

References

Created: 2026-06-23 11:13 UTC | Updated: 2026-06-23 11:13 UTC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:55:40.818Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101"
          },
          {
            "name": "108073",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/108073"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/154376/Pulse-Secure-8.1R15.1-8.2-8.3-9.0-SSL-VPN-Remote-Code-Execution.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/"
          },
          {
            "name": "VU#927237",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/927237"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/155277/Pulse-Secure-VPN-Arbitrary-Command-Execution.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/162092/Pulse-Secure-VPN-Arbitrary-Command-Execution.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2019-11539",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-03T15:40:52.619006Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2021-11-03",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11539"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-78",
                "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-21T23:45:38.985Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11539"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2021-11-03T00:00:00.000Z",
            "value": "CVE-2019-11539 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AC:H/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-04-06T15:06:16.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101"
        },
        {
          "name": "108073",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/108073"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/154376/Pulse-Secure-8.1R15.1-8.2-8.3-9.0-SSL-VPN-Remote-Code-Execution.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/"
        },
        {
          "name": "VU#927237",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "https://www.kb.cert.org/vuls/id/927237"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/155277/Pulse-Secure-VPN-Arbitrary-Command-Execution.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/162092/Pulse-Secure-VPN-Arbitrary-Command-Execution.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-11539",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands."
            }
          ]
        },
        "impact": {
          "cvss": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AC:H/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101",
              "refsource": "CONFIRM",
              "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101"
            },
            {
              "name": "108073",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/108073"
            },
            {
              "name": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010",
              "refsource": "CONFIRM",
              "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010"
            },
            {
              "name": "https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf",
              "refsource": "MISC",
              "url": "https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf"
            },
            {
              "name": "http://packetstormsecurity.com/files/154376/Pulse-Secure-8.1R15.1-8.2-8.3-9.0-SSL-VPN-Remote-Code-Execution.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/154376/Pulse-Secure-8.1R15.1-8.2-8.3-9.0-SSL-VPN-Remote-Code-Execution.html"
            },
            {
              "name": "https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/",
              "refsource": "MISC",
              "url": "https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/"
            },
            {
              "name": "VU#927237",
              "refsource": "CERT-VN",
              "url": "https://www.kb.cert.org/vuls/id/927237"
            },
            {
              "name": "http://packetstormsecurity.com/files/155277/Pulse-Secure-VPN-Arbitrary-Command-Execution.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/155277/Pulse-Secure-VPN-Arbitrary-Command-Execution.html"
            },
            {
              "name": "http://packetstormsecurity.com/files/162092/Pulse-Secure-VPN-Arbitrary-Command-Execution.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/162092/Pulse-Secure-VPN-Arbitrary-Command-Execution.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-11539",
    "datePublished": "2019-04-26T01:39:36.000Z",
    "dateReserved": "2019-04-25T00:00:00.000Z",
    "dateUpdated": "2025-10-21T23:45:38.985Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "cisa_known_exploited": {
      "cveID": "CVE-2019-11539",
      "cwes": "[\"CWE-78\"]",
      "dateAdded": "2021-11-03",
      "dueDate": "2022-05-03",
      "knownRansomwareCampaignUse": "Known",
      "notes": "https://nvd.nist.gov/vuln/detail/CVE-2019-11539",
      "product": "Pulse Connect Secure and Pulse Policy Secure",
      "requiredAction": "Apply updates per vendor instructions.",
      "shortDescription": "Ivanti Pulse Connect Secure and Policy Secure allows an authenticated attacker from the admin web interface to inject and execute commands.",
      "vendorProject": "Ivanti",
      "vulnerabilityName": "Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability"
    },
    "epss": {
      "cve": "CVE-2019-11539",
      "date": "2026-07-22",
      "epss": "0.98617",
      "percentile": "0.99919"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2019-11539\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2019-04-26T02:29:00.300\",\"lastModified\":\"2025-11-06T16:51:27.347\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.\"},{\"lang\":\"es\",\"value\":\"En Pulse Secure Pulse Connect Secure versiones 9.0RX anteriores a 9.0R3.4, versiones 8.3RX anteriores a 8.3R7.1, versiones 8.2RX anteriores a 8.2R12.1, y versiones 8.1RX anteriores a 8.1R15.1; Pulse Policy Secure versiones 9.0RX anteriores a 9.0R3.2, versiones 5.4RX anteriores a 5.4R7.1, versiones 5.3RX anteriores a 5.3R12.1, versiones 5.2RX anteriores a 5.2R12.1, y versiones 5.1RX anteriores a 5.1R15.1, la interfaz web de administraci\u00f3n permite a un atacante autenticado inyectar y ejecutar comandos.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.2,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.2,\"impactScore\":5.9}],\"cvssMetricV30\":[{\"source\":\"cve@mitre.org\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H\",\"baseScore\":8.0,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.3,\"impactScore\":6.0}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:S/C:P/I:P/A:P\",\"baseScore\":6.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"cisaExploitAdd\":\"2021-11-03\",\"cisaActionDue\":\"2022-05-03\",\"cisaRequiredAction\":\"Apply updates per vendor instructions.\",\"cisaVulnerabilityName\":\"Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability\",\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-78\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-78\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.1:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"CA1B64EC-AD68-4F55-9CA2-4A1841764CF3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.1:r1.0:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BF1434F-BC2F-4C63-B3CB-BBC14F95E0EE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.1:r1.1:*:*:*:*:*:*\",\"matchCriteriaId\":\"5EF31B2A-7DEE-4C69-ADE5-FFBF176D8DCF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.1:r10.0:*:*:*:*:*:*\",\"matchCriteriaId\":\"AFC39A4D-7738-4818-9866-A34C55216401\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.1:r11.0:*:*:*:*:*:*\",\"matchCriteriaId\":\"91B0F725-70CD-4CF4-AF35-4DEB24F7E3E1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.1:r11.1:*:*:*:*:*:*\",\"matchCriteriaId\":\"E6FA7630-082B-4F48-BE53-981052FB7268\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.1:r12.0:*:*:*:*:*:*\",\"matchCriteriaId\":\"46F9CEBB-08AD-42DD-8CEE-6F1C555D1608\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.1:r12.1:*:*:*:*:*:*\",\"matchCriteriaId\":\"BF7844C4-7A48-49D1-A924-2C546E9C6BB6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.1:r13.0:*:*:*:*:*:*\",\"matchCriteriaId\":\"91884BC5-280F-4E39-88E0-E7C4F6519D71\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.1:r14.0:*:*:*:*:*:*\",\"matchCriteriaId\":\"3E3F03F7-A3CE-4E98-95A7-43906FFE7959\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.1:r2.0:*:*:*:*:*:*\",\"matchCriteriaId\":\"D56B8268-81D1-4CC0-A115-0CDFE8ACD59D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.1:r2.1:*:*:*:*:*:*\",\"matchCriteriaId\":\"B10E91CD-0FCC-4DEF-8043-38819C597934\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.1:r3.0:*:*:*:*:*:*\",\"matchCriteriaId\":\"90781AFB-D463-40F4-9A74-8F0256ACE64F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.1:r3.1:*:*:*:*:*:*\",\"matchCriteriaId\":\"9D3965E4-51E0-4F15-B03B-7342EA6BCA63\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.1:r3.2:*:*:*:*:*:*\",\"matchCriteriaId\":\"2636BBD1-D46F-4EA2-A460-A343443F838A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.1:r4.0:*:*:*:*:*:*\",\"matchCriteriaId\":\"ECFA01A7-6AB6-4E6B-82E3-30CE8C776960\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.1:r4.1:*:*:*:*:*:*\",\"matchCriteriaId\":\"069B315B-FF97-4F3C-A1AB-831E6CD5F94C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.1:r5.0:*:*:*:*:*:*\",\"matchCriteriaId\":\"84418011-9D3F-4C72-B911-A6E4CEA171F3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.1:r6.0:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7D488D9-6AC7-4DE4-9D65-A8E2D287DCB9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.1:r7:*:*:*:*:*:*\",\"matchCriteriaId\":\"EA6054EC-A05F-46B4-9056-5719B2DB7EFB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.1:r7.0:*:*:*:*:*:*\",\"matchCriteriaId\":\"B3A09079-5587-4FB1-9EC2-F6E44D523CB7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.1:r8.0:*:*:*:*:*:*\",\"matchCriteriaId\":\"8FB98CD3-E968-4336-81BD-0132DBD7462C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.1:r9.0:*:*:*:*:*:*\",\"matchCriteriaId\":\"C5465537-625D-4A9D-8787-FF4744681BA8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.1:r9.1:*:*:*:*:*:*\",\"matchCriteriaId\":\"96A2E24D-5EE5-46CF-AAA0-8474C4F641F6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.1:r9.2:*:*:*:*:*:*\",\"matchCriteriaId\":\"1243FDDA-6D64-408E-8911-FA1D37A915ED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2BCE3E8-ED64-4CCD-9A3F-3D99476B81E1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.2:r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F134803-A479-4DBE-B3D4-3A5D121E185F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.2:r1.0:*:*:*:*:*:*\",\"matchCriteriaId\":\"48B04626-10A7-4A12-AF3D-61C8D980AA21\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.2:r1.1:*:*:*:*:*:*\",\"matchCriteriaId\":\"183E1DD7-EE4B-47C4-99E2-CD06ED2E0D4F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.2:r10.0:*:*:*:*:*:*\",\"matchCriteriaId\":\"00F4DF7B-ED7F-46FC-8B12-5527FB5A4305\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.2:r11.0:*:*:*:*:*:*\",\"matchCriteriaId\":\"4A5AF6A0-6613-4B15-A1A3-AEAC0EF7E374\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.2:r12.0:*:*:*:*:*:*\",\"matchCriteriaId\":\"970C2BEE-5798-4A5F-8D4E-7970BFCF0CD2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.2:r2.0:*:*:*:*:*:*\",\"matchCriteriaId\":\"1D187DDB-96C8-4435-992E-CFEEE24BC7C5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.2:r3.0:*:*:*:*:*:*\",\"matchCriteriaId\":\"1CA6CBE1-CF6C-4D8C-BAB3-0B78E56E85DA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.2:r3.1:*:*:*:*:*:*\",\"matchCriteriaId\":\"761102E8-04DB-465A-A592-98C5F5E0ADFA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.2:r4.0:*:*:*:*:*:*\",\"matchCriteriaId\":\"3F7455AD-E662-4817-A343-9ACCE763B78E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.2:r4.1:*:*:*:*:*:*\",\"matchCriteriaId\":\"A1F61A93-6E90-4063-BFCA-166DA0DDCE38\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.2:r5.0:*:*:*:*:*:*\",\"matchCriteriaId\":\"B5BF94C4-0456-4CB1-9CC5-02A316C84E09\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.2:r5.1:*:*:*:*:*:*\",\"matchCriteriaId\":\"35F94103-0DB3-4D3A-8247-59E1F86743B8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.2:r6.0:*:*:*:*:*:*\",\"matchCriteriaId\":\"784ADC67-57BF-4FFA-AC13-5F2F1208F39D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.2:r7.0:*:*:*:*:*:*\",\"matchCriteriaId\":\"E6D81535-5163-4DAD-8AAA-61F107E11EB8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.2:r7.1:*:*:*:*:*:*\",\"matchCriteriaId\":\"DCF535C6-97A2-4222-9BF4-A7D16E5598FF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.2:r7.2:*:*:*:*:*:*\",\"matchCriteriaId\":\"40209543-6A6C-4811-834F-1CBF0C13A7E1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.2:r8.0:*:*:*:*:*:*\",\"matchCriteriaId\":\"2B3806F4-53E6-47B2-9D16-69B566DAAD97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.2:r8.1:*:*:*:*:*:*\",\"matchCriteriaId\":\"A37BEF28-D0D5-46BD-A460-32734D0D63B8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.2:r8.2:*:*:*:*:*:*\",\"matchCriteriaId\":\"363C9E09-EC06-4A34-8C25-97DCCAA992E1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.2:r9.0:*:*:*:*:*:*\",\"matchCriteriaId\":\"3AB170D9-42AF-417B-8EF8-2895F54D0AEE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.3:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"26EF79B8-9D5D-4C00-B42A-B58BB6EDA452\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.3:r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"2871AAD9-FC12-4E2D-B722-0F721D7FE101\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.3:r1.1:*:*:*:*:*:*\",\"matchCriteriaId\":\"C52DE60A-0B74-406C-B962-313E37806E89\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.3:r2:*:*:*:*:*:*\",\"matchCriteriaId\":\"2A319BAB-F483-4926-9700-760D8025F747\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.3:r2.1:*:*:*:*:*:*\",\"matchCriteriaId\":\"AA6BD7FD-29A3-468C-8A85-63202EB1B625\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.3:r3:*:*:*:*:*:*\",\"matchCriteriaId\":\"00AA23DF-CA30-41FC-9563-C95BA7D31129\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.3:r4:*:*:*:*:*:*\",\"matchCriteriaId\":\"D85A6292-EE41-487C-A1DC-0E8E443A8075\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.3:r5:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D829F28-4FFF-40C9-AF62-455BA5BB4E58\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.3:r5.1:*:*:*:*:*:*\",\"matchCriteriaId\":\"8DC693D8-D12B-4A0B-808A-A0808BAA33DD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.3:r5.2:*:*:*:*:*:*\",\"matchCriteriaId\":\"3837BB6E-5236-4B2D-9693-4DE85C7845C3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.3:r6:*:*:*:*:*:*\",\"matchCriteriaId\":\"72430B2F-A311-4DF7-ABBB-1EE0BAF507FD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.3:r6.1:*:*:*:*:*:*\",\"matchCriteriaId\":\"B7FCDCCF-8509-431A-B450-B18C110AAE19\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:8.3:r7:*:*:*:*:*:*\",\"matchCriteriaId\":\"718B6320-E7BE-4715-A446-541D1AADA027\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:9.0:r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"D47D09A8-4AC4-4CD9-B648-5F26453E2E1D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:9.0:r2:*:*:*:*:*:*\",\"matchCriteriaId\":\"59331DC5-FF5F-4BB3-905E-5A4A621F86ED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:9.0:r2.1:*:*:*:*:*:*\",\"matchCriteriaId\":\"6A708C3F-9050-4475-95B3-4785D3E2CB69\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:9.0:r3:*:*:*:*:*:*\",\"matchCriteriaId\":\"52851AAA-88FB-40BC-B41A-B821F6BA9F79\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:9.0:r3.1:*:*:*:*:*:*\",\"matchCriteriaId\":\"F05DC11E-7C41-450B-A2BF-603E9252BB40\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:9.0:r3.2:*:*:*:*:*:*\",\"matchCriteriaId\":\"5DA976D9-A330-475E-B8C0-09EF3E08F18D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:connect_secure:9.0:r3.3:*:*:*:*:*:*\",\"matchCriteriaId\":\"59F4A6F7-A6D4-4517-A316-7C7C002A9ED3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:policy_secure:9.0:r1:*:*:*:*:*:*\",\"matchCriteriaId\":\"26B25B34-7BD0-471B-A396-45CE5420E963\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:policy_secure:9.0:r2:*:*:*:*:*:*\",\"matchCriteriaId\":\"AA514C05-2834-4C7B-B022-02B41C9AAD6A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:policy_secure:9.0:r2.1:*:*:*:*:*:*\",\"matchCriteriaId\":\"0929C645-DACB-4341-9032-7C79FFC8BCF0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:policy_secure:9.0:r3:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D36CB5A-8389-4F2F-882A-4E8F30028799\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ivanti:policy_secure:9.0:r3.1:*:*:*:*:*:*\",\"matchCriteriaId\":\"517DA74B-9D69-45E1-A707-A08A305A507C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"45491FB0-2EDC-4B62-838F-A8CB2E92F4FD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F62EC1F3-10DC-4387-B4DA-8EA8086EA390\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"75A2801C-029F-469C-9492-9AB0535B1F6C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"219B113E-88AB-4250-81BB-3735A49A09C8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"84885E71-5C0D-4869-97A5-B8F955FBE728\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r3.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D8F5AB09-D5D3-4499-BDE8-6471F827D825\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"09FF5E94-07F5-416C-976F-4FF22141A145\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E77318F9-AA30-4010-A351-98A3942DA8DD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9D328C58-51A0-4A62-8CFC-BAA5A9D8EDF3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F3015D79-3AD8-4EBE-A236-6ADEC2AA4B6C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A8BFFFF2-BA60-483A-BD7E-041EDD1932E3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D04A72C3-2735-4F83-8F91-82405C16FE40\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r9.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2A100AF1-A8A7-4E0A-9D29-E00C56C0AAFE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"596A0CEE-44FD-4A03-8386-750D0E4947D0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BEDA32E5-A047-49FD-A52C-FDA132881337\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r11.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"65900FCC-9DD2-4606-B125-451946734453\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r12.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EB8051E3-A7F0-4E17-AB73-E4F1DBD6FB78\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r12.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5A3DEE0B-048F-4FE8-A508-043D87F54611\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r13.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"262F4B72-D73E-41B4-B62A-39AD505412D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r14.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3DF64796-2698-48EF-AF93-86F070967C98\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6A42EFC8-C5FF-4397-87CF-263813FAA5D7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C952B5B8-DCAB-476A-9E60-3F1BBE509F21\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F199F01-9EEA-4184-AD99-6B21110484AB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r3.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9938EBCC-B9B7-4FB1-9ACB-9BED485AB5E2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9B4A309B-ACB0-4053-909A-6889129EB2C1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D8A4A105-EBF3-4895-9ABE-50972DD232F8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4013CA1C-48F0-46F6-B327-E6B34311A7EA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"112B9736-336D-4C72-A960-0B33DD3439EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"49FA8DC5-900B-4A53-AF55-410A7FF901E9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A4946BBE-E449-4F89-910C-3389BDF36071\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1FDBD7BC-C9A7-48C2-B3BC-8E2C90F54268\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r9.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C4B56D6E-2429-4511-8FE6-A9BE1226F031\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"17BD737E-F387-4239-B3C6-E4B71EB13995\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CFC6D632-9B03-4CFF-85D8-B4127257A47E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2rx:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C766CBF4-502C-4522-845C-A5436DD1960D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"94170224-C78B-458A-B63E-53E303B0DCE3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"17449ADA-D4CC-4A23-9699-2D3E695C519A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"44B21A8C-F09F-4286-8E32-C10E474C8D3F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8654C226-F77A-464D-9AD1-010DC11F8C46\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"70F3AFCF-8723-4F80-89A2-BC9D62CE920E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"545F18AB-635E-47C0-ACFE-8B2A849253FF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"52DD6EDE-5CF1-4BD9-93B7-8100ED9DDC3F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6D74E173-3599-4A32-BE9A-482998800122\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"116DD35E-B83E-4865-8B54-E5C68D148187\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r5.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7D02A7DF-69CE-426B-8153-3BA404B4AC64\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DA199898-3820-4B6C-ADF6-9EA0E8238200\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A37EBB8A-48E0-4092-A5E4-ABA0C02934AD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9EAEBC16-AA55-4145-8FD4-84217DE4CB6D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r8.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EF3A87EB-CEF3-4CE3-A258-EE95560D46F2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r8.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7B273CCA-CFA6-4A73-99D1-44A51ADBAF00\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B5E92137-41D4-4350-AD8D-B2F36FBA5B41\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r10.:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"18E78ACD-828A-421D-88B7-C08079CD39A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"60129D21-0A5D-44B6-A9F0-C97E3327C58D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r12.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"13477A91-0880-4CDA-A932-12912909E1AF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3rx:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1E78343D-6F53-44C0-8C45-694E6D03DB95\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C7F2FFEC-F243-4D85-888E-339C60B3C0CE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6A841849-DA0E-4BAA-8807-F42481C9457D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2EC5A497-1FA2-4AE4-A611-553129B9F78C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"479B25A4-59AA-4FA4-B1CC-E06781D00962\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"91C0556B-2420-46F2-A08E-EC83DA514A69\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"479C0704-9FE5-42D6-8968-780391708F44\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r5.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ABE3B07D-879B-4AF2-9AA7-D9F64A577373\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"497631E3-0E1F-4267-8ADA-7697FF0BF7EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r6.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7FF444E5-2EEA-4223-85E1-B2EA6D0543E7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1DA2AD75-A6DD-48D0-83E7-A5F00F31C010\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4rx:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07A6F2EF-09AF-4DAA-A552-6111C51DD210\"}]}]}],\"references\":[{\"url\":\"http://packetstormsecurity.com/files/154376/Pulse-Secure-8.1R15.1-8.2-8.3-9.0-SSL-VPN-Remote-Code-Execution.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://packetstormsecurity.com/files/155277/Pulse-Secure-VPN-Arbitrary-Command-Execution.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://packetstormsecurity.com/files/162092/Pulse-Secure-VPN-Arbitrary-Command-Execution.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/bid/108073\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"Vendor Advisory\"]},{\"url\":\"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.kb.cert.org/vuls/id/927237\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"http://packetstormsecurity.com/files/154376/Pulse-Secure-8.1R15.1-8.2-8.3-9.0-SSL-VPN-Remote-Code-Execution.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://packetstormsecurity.com/files/155277/Pulse-Secure-VPN-Arbitrary-Command-Execution.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://packetstormsecurity.com/files/162092/Pulse-Secure-VPN-Arbitrary-Command-Execution.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/bid/108073\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"Vendor Advisory\"]},{\"url\":\"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.kb.cert.org/vuls/id/927237\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11539\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"US Government Resource\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"http://www.securityfocus.com/bid/108073\", \"name\": \"108073\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\", \"x_transferred\"]}, {\"url\": \"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"http://packetstormsecurity.com/files/154376/Pulse-Secure-8.1R15.1-8.2-8.3-9.0-SSL-VPN-Remote-Code-Execution.html\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://www.kb.cert.org/vuls/id/927237\", \"name\": \"VU#927237\", \"tags\": [\"third-party-advisory\", \"x_refsource_CERT-VN\", \"x_transferred\"]}, {\"url\": \"http://packetstormsecurity.com/files/155277/Pulse-Secure-VPN-Arbitrary-Command-Execution.html\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"http://packetstormsecurity.com/files/162092/Pulse-Secure-VPN-Arbitrary-Command-Execution.html\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-04T22:55:40.818Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2019-11539\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-02-03T15:40:52.619006Z\"}}}, {\"other\": {\"type\": \"kev\", \"content\": {\"dateAdded\": \"2021-11-03\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11539\"}}}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2021-11-03T00:00:00.000Z\", \"value\": \"CVE-2019-11539 added to CISA KEV\"}], \"references\": [{\"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11539\", \"tags\": [\"government-resource\"]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-78\", \"description\": \"CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-02-03T15:40:20.467Z\"}}], \"cna\": {\"metrics\": [{\"cvssV3_0\": {\"scope\": \"CHANGED\", \"version\": \"3.0\", \"baseScore\": 8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.0/AC:H/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"HIGH\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"vendor\": \"n/a\", \"product\": \"n/a\", \"versions\": [{\"status\": \"affected\", \"version\": \"n/a\"}]}], \"references\": [{\"url\": \"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"http://www.securityfocus.com/bid/108073\", \"name\": \"108073\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\"]}, {\"url\": \"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"http://packetstormsecurity.com/files/154376/Pulse-Secure-8.1R15.1-8.2-8.3-9.0-SSL-VPN-Remote-Code-Execution.html\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://www.kb.cert.org/vuls/id/927237\", \"name\": \"VU#927237\", \"tags\": [\"third-party-advisory\", \"x_refsource_CERT-VN\"]}, {\"url\": \"http://packetstormsecurity.com/files/155277/Pulse-Secure-VPN-Arbitrary-Command-Execution.html\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"http://packetstormsecurity.com/files/162092/Pulse-Secure-VPN-Arbitrary-Command-Execution.html\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"text\", \"description\": \"n/a\"}]}], \"providerMetadata\": {\"orgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"shortName\": \"mitre\", \"dateUpdated\": \"2021-04-06T15:06:16.000Z\"}, \"x_legacyV4Record\": {\"impact\": {\"cvss\": {\"scope\": \"CHANGED\", \"version\": \"3.0\", \"attackVector\": \"NETWORK\", \"vectorString\": \"CVSS:3.0/AC:H/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"HIGH\", \"confidentialityImpact\": \"HIGH\"}}, \"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"version\": {\"version_data\": [{\"version_value\": \"n/a\"}]}, \"product_name\": \"n/a\"}]}, \"vendor_name\": \"n/a\"}]}}, \"data_type\": \"CVE\", \"references\": {\"reference_data\": [{\"url\": \"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101\", \"name\": \"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101\", \"refsource\": \"CONFIRM\"}, {\"url\": \"http://www.securityfocus.com/bid/108073\", \"name\": \"108073\", \"refsource\": \"BID\"}, {\"url\": \"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010\", \"name\": \"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010\", \"refsource\": \"CONFIRM\"}, {\"url\": \"https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf\", \"name\": \"https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf\", \"refsource\": \"MISC\"}, {\"url\": \"http://packetstormsecurity.com/files/154376/Pulse-Secure-8.1R15.1-8.2-8.3-9.0-SSL-VPN-Remote-Code-Execution.html\", \"name\": \"http://packetstormsecurity.com/files/154376/Pulse-Secure-8.1R15.1-8.2-8.3-9.0-SSL-VPN-Remote-Code-Execution.html\", \"refsource\": \"MISC\"}, {\"url\": \"https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/\", \"name\": \"https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/\", \"refsource\": \"MISC\"}, {\"url\": \"https://www.kb.cert.org/vuls/id/927237\", \"name\": \"VU#927237\", \"refsource\": \"CERT-VN\"}, {\"url\": \"http://packetstormsecurity.com/files/155277/Pulse-Secure-VPN-Arbitrary-Command-Execution.html\", \"name\": \"http://packetstormsecurity.com/files/155277/Pulse-Secure-VPN-Arbitrary-Command-Execution.html\", \"refsource\": \"MISC\"}, {\"url\": \"http://packetstormsecurity.com/files/162092/Pulse-Secure-VPN-Arbitrary-Command-Execution.html\", \"name\": \"http://packetstormsecurity.com/files/162092/Pulse-Secure-VPN-Arbitrary-Command-Execution.html\", \"refsource\": \"MISC\"}]}, \"data_format\": \"MITRE\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"n/a\"}]}]}, \"data_version\": \"4.0\", \"CVE_data_meta\": {\"ID\": \"CVE-2019-11539\", \"STATE\": \"PUBLIC\", \"ASSIGNER\": \"cve@mitre.org\"}}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2019-11539\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-10-21T23:45:38.985Z\", \"dateReserved\": \"2019-04-25T00:00:00.000Z\", \"assignerOrgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"datePublished\": \"2019-04-26T01:39:36.000Z\", \"assignerShortName\": \"mitre\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

BDU:2023-00990

Vulnerability from fstec - Published: 25.04.2019

Title

Уязвимость веб-интерфейса администрирования VPN-шлюза корпоративных сетей Pulse Connect Secure, позволяющая нарушителю выполнить произвольный код

Description

Уязвимость веб-интерфейса администрирования VPN-шлюза корпоративных сетей Pulse Connect Secure связана с недостаточной очисткой входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код путем отправки специально созданного запроса

Severity


                    
                      AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Vendor

Pulsesecure

Software Name

Pulse Connect Secure, Pulse Policy Secure

Software Version

8.1 R1.0 (Pulse Connect Secure), 8.1 (Pulse Connect Secure), 8.2 R7.0 (Pulse Connect Secure), 8.2 R4.0 (Pulse Connect Secure), 8.2 R2.0 (Pulse Connect Secure), 8.2 R1.0 (Pulse Connect Secure), 8.2 R7.1 (Pulse Connect Secure), 8.2 R4.1 (Pulse Connect Secure), 8.2 R3.0 (Pulse Connect Secure), 8.2 R5.0 (Pulse Connect Secure), 8.2 R3.1 (Pulse Connect Secure), 8.2 R5.1 (Pulse Connect Secure), 8.2 R6.0 (Pulse Connect Secure), 9.0 R3.1 (Pulse Connect Secure), 9.0 R3.2 (Pulse Connect Secure), 9.0 R1 (Pulse Connect Secure), 9.0 R2 (Pulse Connect Secure), 9.0 R2.1 (Pulse Connect Secure), 9.0 R3 (Pulse Connect Secure), 8.2r1.1 (Pulse Connect Secure), 8.2 (Pulse Connect Secure), 8.2RX (Pulse Connect Secure), 8.3 (Pulse Connect Secure), 8.3RX (Pulse Connect Secure), 9.0RX (Pulse Connect Secure), 5.1R1.0 (Pulse Policy Secure), 5.1R1.1 (Pulse Policy Secure), 5.1R2.0 (Pulse Policy Secure), 5.1R2.1 (Pulse Policy Secure), 5.1R3.0 (Pulse Policy Secure), 5.1R3.2 (Pulse Policy Secure), 5.1R4.0 (Pulse Policy Secure), 5.1R5.0 (Pulse Policy Secure), 5.1R6.0 (Pulse Policy Secure), 5.1R7.0 (Pulse Policy Secure), 5.1R8.0 (Pulse Policy Secure), 5.1R9.0 (Pulse Policy Secure), 5.1R9.1 (Pulse Policy Secure), 5.1R10.0 (Pulse Policy Secure), 5.1R11.0 (Pulse Policy Secure), 5.1R11.1 (Pulse Policy Secure), 5.1R12.0 (Pulse Policy Secure), 5.1R12.1 (Pulse Policy Secure), 5.1R13.0 (Pulse Policy Secure), 5.1R14.0 (Pulse Policy Secure), 5.2R1.0 (Pulse Policy Secure), 5.2R2.0 (Pulse Policy Secure), 5.2R3.0 (Pulse Policy Secure), 5.2R3.2 (Pulse Policy Secure), 5.2R4.0 (Pulse Policy Secure), 5.2R5.0 (Pulse Policy Secure), 5.2R6.0 (Pulse Policy Secure), 5.2R7.0 (Pulse Policy Secure)

Possible Mitigations

Использование рекомендаций производителя: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101

Reference

http://packetstormsecurity.com/files/154376/Pulse-Secure-8.1R15.1-8.2-8.3-9.0-SSL-VPN-Remote-Code-Execution.html https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv

CWE

CWE-78

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
  "CVSS 3.0": "AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Pulsesecure",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "8.1 R1.0 (Pulse Connect Secure), 8.1 (Pulse Connect Secure), 8.2 R7.0 (Pulse Connect Secure), 8.2 R4.0 (Pulse Connect Secure), 8.2 R2.0 (Pulse Connect Secure), 8.2 R1.0 (Pulse Connect Secure), 8.2 R7.1 (Pulse Connect Secure), 8.2 R4.1 (Pulse Connect Secure), 8.2 R3.0 (Pulse Connect Secure), 8.2 R5.0 (Pulse Connect Secure), 8.2 R3.1 (Pulse Connect Secure), 8.2 R5.1 (Pulse Connect Secure), 8.2 R6.0 (Pulse Connect Secure), 9.0 R3.1 (Pulse Connect Secure), 9.0 R3.2 (Pulse Connect Secure), 9.0 R1 (Pulse Connect Secure), 9.0 R2 (Pulse Connect Secure), 9.0 R2.1 (Pulse Connect Secure), 9.0 R3 (Pulse Connect Secure), 8.2r1.1 (Pulse Connect Secure), 8.2 (Pulse Connect Secure), 8.2RX (Pulse Connect Secure), 8.3 (Pulse Connect Secure), 8.3RX (Pulse Connect Secure), 9.0RX (Pulse Connect Secure), 5.1R1.0 (Pulse Policy Secure), 5.1R1.1 (Pulse Policy Secure), 5.1R2.0 (Pulse Policy Secure), 5.1R2.1 (Pulse Policy Secure), 5.1R3.0 (Pulse Policy Secure), 5.1R3.2 (Pulse Policy Secure), 5.1R4.0 (Pulse Policy Secure), 5.1R5.0 (Pulse Policy Secure), 5.1R6.0 (Pulse Policy Secure), 5.1R7.0 (Pulse Policy Secure), 5.1R8.0 (Pulse Policy Secure), 5.1R9.0 (Pulse Policy Secure), 5.1R9.1 (Pulse Policy Secure), 5.1R10.0 (Pulse Policy Secure), 5.1R11.0 (Pulse Policy Secure), 5.1R11.1 (Pulse Policy Secure), 5.1R12.0 (Pulse Policy Secure), 5.1R12.1 (Pulse Policy Secure), 5.1R13.0 (Pulse Policy Secure), 5.1R14.0 (Pulse Policy Secure), 5.2R1.0 (Pulse Policy Secure), 5.2R2.0 (Pulse Policy Secure), 5.2R3.0 (Pulse Policy Secure), 5.2R3.2 (Pulse Policy Secure), 5.2R4.0 (Pulse Policy Secure), 5.2R5.0 (Pulse Policy Secure), 5.2R6.0 (Pulse Policy Secure), 5.2R7.0 (Pulse Policy Secure)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "25.04.2019",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "24.09.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.03.2023",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2023-00990",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2019-11539",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Pulse Connect Secure, Pulse Policy Secure",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f VPN-\u0448\u043b\u044e\u0437\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 Pulse Connect Secure, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e  \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043f\u0440\u0438\u043d\u044f\u0442\u0438\u0435 \u043c\u0435\u0440 \u043f\u043e \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (\u0412\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b) (CWE-78)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f VPN-\u0448\u043b\u044e\u0437\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 Pulse Connect Secure \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043e\u0447\u0438\u0441\u0442\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0418\u043d\u044a\u0435\u043a\u0446\u0438\u044f",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://packetstormsecurity.com/files/154376/Pulse-Secure-8.1R15.1-8.2-8.3-9.0-SSL-VPN-Remote-Code-Execution.html\nhttps://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u0421\u0435\u0442\u0435\u0432\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e, \u0421\u0435\u0442\u0435\u0432\u043e\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-78",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 9)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8)"
}

FKIE_CVE-2019-11539

Vulnerability from fkie_nvd - Published: 2019-04-26 02:29 - Updated: 2026-06-17 02:13

CISA KEVIntel

Severity

7.2 (High) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Summary

References

URL	Tags
cve@mitre.org	http://packetstormsecurity.com/files/154376/Pulse-Secure-8.1R15.1-8.2-8.3-9.0-SSL-VPN-Remote-Code-Execution.html	Third Party Advisory, VDB Entry
cve@mitre.org	http://packetstormsecurity.com/files/155277/Pulse-Secure-VPN-Arbitrary-Command-Execution.html	Third Party Advisory, VDB Entry
cve@mitre.org	http://packetstormsecurity.com/files/162092/Pulse-Secure-VPN-Arbitrary-Command-Execution.html	Broken Link, Third Party Advisory, VDB Entry
cve@mitre.org	http://www.securityfocus.com/bid/108073	Broken Link, Third Party Advisory, VDB Entry
cve@mitre.org	https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/	Exploit, Third Party Advisory
cve@mitre.org	https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf	Exploit, Third Party Advisory
cve@mitre.org	https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101	Third Party Advisory, Vendor Advisory
cve@mitre.org	https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010	Third Party Advisory
cve@mitre.org	https://www.kb.cert.org/vuls/id/927237	Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108	http://packetstormsecurity.com/files/154376/Pulse-Secure-8.1R15.1-8.2-8.3-9.0-SSL-VPN-Remote-Code-Execution.html	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://packetstormsecurity.com/files/155277/Pulse-Secure-VPN-Arbitrary-Command-Execution.html	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://packetstormsecurity.com/files/162092/Pulse-Secure-VPN-Arbitrary-Command-Execution.html	Broken Link, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/108073	Broken Link, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/	Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf	Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101	Third Party Advisory, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://www.kb.cert.org/vuls/id/927237	Third Party Advisory, US Government Resource
134c704f-9b21-4f2e-91b3-4a467353bcc0	https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11539	US Government Resource

Impacted products

Vendor	Product	Version
ivanti	connect_secure	8.1
ivanti	connect_secure	8.1
ivanti	connect_secure	8.1
ivanti	connect_secure	8.1
ivanti	connect_secure	8.1
ivanti	connect_secure	8.1
ivanti	connect_secure	8.1
ivanti	connect_secure	8.1
ivanti	connect_secure	8.1
ivanti	connect_secure	8.1
ivanti	connect_secure	8.1
ivanti	connect_secure	8.1
ivanti	connect_secure	8.1
ivanti	connect_secure	8.1
ivanti	connect_secure	8.1
ivanti	connect_secure	8.1
ivanti	connect_secure	8.1
ivanti	connect_secure	8.1
ivanti	connect_secure	8.1
ivanti	connect_secure	8.1
ivanti	connect_secure	8.1
ivanti	connect_secure	8.1
ivanti	connect_secure	8.1
ivanti	connect_secure	8.1
ivanti	connect_secure	8.1
ivanti	connect_secure	8.2
ivanti	connect_secure	8.2
ivanti	connect_secure	8.2
ivanti	connect_secure	8.2
ivanti	connect_secure	8.2
ivanti	connect_secure	8.2
ivanti	connect_secure	8.2
ivanti	connect_secure	8.2
ivanti	connect_secure	8.2
ivanti	connect_secure	8.2
ivanti	connect_secure	8.2
ivanti	connect_secure	8.2
ivanti	connect_secure	8.2
ivanti	connect_secure	8.2
ivanti	connect_secure	8.2
ivanti	connect_secure	8.2
ivanti	connect_secure	8.2
ivanti	connect_secure	8.2
ivanti	connect_secure	8.2
ivanti	connect_secure	8.2
ivanti	connect_secure	8.2
ivanti	connect_secure	8.2
ivanti	connect_secure	8.3
ivanti	connect_secure	8.3
ivanti	connect_secure	8.3
ivanti	connect_secure	8.3
ivanti	connect_secure	8.3
ivanti	connect_secure	8.3
ivanti	connect_secure	8.3
ivanti	connect_secure	8.3
ivanti	connect_secure	8.3
ivanti	connect_secure	8.3
ivanti	connect_secure	8.3
ivanti	connect_secure	8.3
ivanti	connect_secure	8.3
ivanti	connect_secure	9.0
ivanti	connect_secure	9.0
ivanti	connect_secure	9.0
ivanti	connect_secure	9.0
ivanti	connect_secure	9.0
ivanti	connect_secure	9.0
ivanti	connect_secure	9.0
ivanti	policy_secure	9.0
ivanti	policy_secure	9.0
ivanti	policy_secure	9.0
ivanti	policy_secure	9.0
ivanti	policy_secure	9.0
pulsesecure	pulse_policy_secure	5.1r1.0
pulsesecure	pulse_policy_secure	5.1r1.1
pulsesecure	pulse_policy_secure	5.1r2.0
pulsesecure	pulse_policy_secure	5.1r2.1
pulsesecure	pulse_policy_secure	5.1r3.0
pulsesecure	pulse_policy_secure	5.1r3.2
pulsesecure	pulse_policy_secure	5.1r4.0
pulsesecure	pulse_policy_secure	5.1r5.0
pulsesecure	pulse_policy_secure	5.1r6.0
pulsesecure	pulse_policy_secure	5.1r7.0
pulsesecure	pulse_policy_secure	5.1r8.0
pulsesecure	pulse_policy_secure	5.1r9.0
pulsesecure	pulse_policy_secure	5.1r9.1
pulsesecure	pulse_policy_secure	5.1r10.0
pulsesecure	pulse_policy_secure	5.1r11.0
pulsesecure	pulse_policy_secure	5.1r11.1
pulsesecure	pulse_policy_secure	5.1r12.0
pulsesecure	pulse_policy_secure	5.1r12.1
pulsesecure	pulse_policy_secure	5.1r13.0
pulsesecure	pulse_policy_secure	5.1r14.0
pulsesecure	pulse_policy_secure	5.2r1.0
pulsesecure	pulse_policy_secure	5.2r2.0
pulsesecure	pulse_policy_secure	5.2r3.0
pulsesecure	pulse_policy_secure	5.2r3.2
pulsesecure	pulse_policy_secure	5.2r4.0
pulsesecure	pulse_policy_secure	5.2r5.0
pulsesecure	pulse_policy_secure	5.2r6.0
pulsesecure	pulse_policy_secure	5.2r7.0
pulsesecure	pulse_policy_secure	5.2r7.1
pulsesecure	pulse_policy_secure	5.2r8.0
pulsesecure	pulse_policy_secure	5.2r9.0
pulsesecure	pulse_policy_secure	5.2r9.1
pulsesecure	pulse_policy_secure	5.2r10.0
pulsesecure	pulse_policy_secure	5.2r11.0
pulsesecure	pulse_policy_secure	5.2rx
pulsesecure	pulse_policy_secure	5.3r1.0
pulsesecure	pulse_policy_secure	5.3r1.1
pulsesecure	pulse_policy_secure	5.3r2.0
pulsesecure	pulse_policy_secure	5.3r3.0
pulsesecure	pulse_policy_secure	5.3r3.1
pulsesecure	pulse_policy_secure	5.3r4.0
pulsesecure	pulse_policy_secure	5.3r4.1
pulsesecure	pulse_policy_secure	5.3r5.0
pulsesecure	pulse_policy_secure	5.3r5.1
pulsesecure	pulse_policy_secure	5.3r5.2
pulsesecure	pulse_policy_secure	5.3r6.0
pulsesecure	pulse_policy_secure	5.3r7.0
pulsesecure	pulse_policy_secure	5.3r8.0
pulsesecure	pulse_policy_secure	5.3r8.1
pulsesecure	pulse_policy_secure	5.3r8.2
pulsesecure	pulse_policy_secure	5.3r9.0
pulsesecure	pulse_policy_secure	5.3r10.
pulsesecure	pulse_policy_secure	5.3r11.0
pulsesecure	pulse_policy_secure	5.3r12.0
pulsesecure	pulse_policy_secure	5.3rx
pulsesecure	pulse_policy_secure	5.4r1
pulsesecure	pulse_policy_secure	5.4r2
pulsesecure	pulse_policy_secure	5.4r2.1
pulsesecure	pulse_policy_secure	5.4r3
pulsesecure	pulse_policy_secure	5.4r4
pulsesecure	pulse_policy_secure	5.4r5
pulsesecure	pulse_policy_secure	5.4r5.2
pulsesecure	pulse_policy_secure	5.4r6
pulsesecure	pulse_policy_secure	5.4r6.1
pulsesecure	pulse_policy_secure	5.4r7
pulsesecure	pulse_policy_secure	5.4rx

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "cisaActionDue": "2022-05-03",
  "cisaExploitAdd": "2021-11-03",
  "cisaRequiredAction": "Apply updates per vendor instructions.",
  "cisaVulnerabilityName": "Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability",
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:-:*:*:*:*:*:*",
              "matchCriteriaId": "CA1B64EC-AD68-4F55-9CA2-4A1841764CF3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:r1.0:*:*:*:*:*:*",
              "matchCriteriaId": "9BF1434F-BC2F-4C63-B3CB-BBC14F95E0EE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:r1.1:*:*:*:*:*:*",
              "matchCriteriaId": "5EF31B2A-7DEE-4C69-ADE5-FFBF176D8DCF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:r10.0:*:*:*:*:*:*",
              "matchCriteriaId": "AFC39A4D-7738-4818-9866-A34C55216401",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:r11.0:*:*:*:*:*:*",
              "matchCriteriaId": "91B0F725-70CD-4CF4-AF35-4DEB24F7E3E1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:r11.1:*:*:*:*:*:*",
              "matchCriteriaId": "E6FA7630-082B-4F48-BE53-981052FB7268",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:r12.0:*:*:*:*:*:*",
              "matchCriteriaId": "46F9CEBB-08AD-42DD-8CEE-6F1C555D1608",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:r12.1:*:*:*:*:*:*",
              "matchCriteriaId": "BF7844C4-7A48-49D1-A924-2C546E9C6BB6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:r13.0:*:*:*:*:*:*",
              "matchCriteriaId": "91884BC5-280F-4E39-88E0-E7C4F6519D71",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:r14.0:*:*:*:*:*:*",
              "matchCriteriaId": "3E3F03F7-A3CE-4E98-95A7-43906FFE7959",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:r2.0:*:*:*:*:*:*",
              "matchCriteriaId": "D56B8268-81D1-4CC0-A115-0CDFE8ACD59D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:r2.1:*:*:*:*:*:*",
              "matchCriteriaId": "B10E91CD-0FCC-4DEF-8043-38819C597934",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:r3.0:*:*:*:*:*:*",
              "matchCriteriaId": "90781AFB-D463-40F4-9A74-8F0256ACE64F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:r3.1:*:*:*:*:*:*",
              "matchCriteriaId": "9D3965E4-51E0-4F15-B03B-7342EA6BCA63",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:r3.2:*:*:*:*:*:*",
              "matchCriteriaId": "2636BBD1-D46F-4EA2-A460-A343443F838A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:r4.0:*:*:*:*:*:*",
              "matchCriteriaId": "ECFA01A7-6AB6-4E6B-82E3-30CE8C776960",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:r4.1:*:*:*:*:*:*",
              "matchCriteriaId": "069B315B-FF97-4F3C-A1AB-831E6CD5F94C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:r5.0:*:*:*:*:*:*",
              "matchCriteriaId": "84418011-9D3F-4C72-B911-A6E4CEA171F3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:r6.0:*:*:*:*:*:*",
              "matchCriteriaId": "A7D488D9-6AC7-4DE4-9D65-A8E2D287DCB9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:r7:*:*:*:*:*:*",
              "matchCriteriaId": "EA6054EC-A05F-46B4-9056-5719B2DB7EFB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:r7.0:*:*:*:*:*:*",
              "matchCriteriaId": "B3A09079-5587-4FB1-9EC2-F6E44D523CB7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:r8.0:*:*:*:*:*:*",
              "matchCriteriaId": "8FB98CD3-E968-4336-81BD-0132DBD7462C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:r9.0:*:*:*:*:*:*",
              "matchCriteriaId": "C5465537-625D-4A9D-8787-FF4744681BA8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:r9.1:*:*:*:*:*:*",
              "matchCriteriaId": "96A2E24D-5EE5-46CF-AAA0-8474C4F641F6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:r9.2:*:*:*:*:*:*",
              "matchCriteriaId": "1243FDDA-6D64-408E-8911-FA1D37A915ED",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "A2BCE3E8-ED64-4CCD-9A3F-3D99476B81E1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.2:r1:*:*:*:*:*:*",
              "matchCriteriaId": "5F134803-A479-4DBE-B3D4-3A5D121E185F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.2:r1.0:*:*:*:*:*:*",
              "matchCriteriaId": "48B04626-10A7-4A12-AF3D-61C8D980AA21",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.2:r1.1:*:*:*:*:*:*",
              "matchCriteriaId": "183E1DD7-EE4B-47C4-99E2-CD06ED2E0D4F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.2:r10.0:*:*:*:*:*:*",
              "matchCriteriaId": "00F4DF7B-ED7F-46FC-8B12-5527FB5A4305",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.2:r11.0:*:*:*:*:*:*",
              "matchCriteriaId": "4A5AF6A0-6613-4B15-A1A3-AEAC0EF7E374",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.2:r12.0:*:*:*:*:*:*",
              "matchCriteriaId": "970C2BEE-5798-4A5F-8D4E-7970BFCF0CD2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.2:r2.0:*:*:*:*:*:*",
              "matchCriteriaId": "1D187DDB-96C8-4435-992E-CFEEE24BC7C5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.2:r3.0:*:*:*:*:*:*",
              "matchCriteriaId": "1CA6CBE1-CF6C-4D8C-BAB3-0B78E56E85DA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.2:r3.1:*:*:*:*:*:*",
              "matchCriteriaId": "761102E8-04DB-465A-A592-98C5F5E0ADFA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.2:r4.0:*:*:*:*:*:*",
              "matchCriteriaId": "3F7455AD-E662-4817-A343-9ACCE763B78E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.2:r4.1:*:*:*:*:*:*",
              "matchCriteriaId": "A1F61A93-6E90-4063-BFCA-166DA0DDCE38",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.2:r5.0:*:*:*:*:*:*",
              "matchCriteriaId": "B5BF94C4-0456-4CB1-9CC5-02A316C84E09",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.2:r5.1:*:*:*:*:*:*",
              "matchCriteriaId": "35F94103-0DB3-4D3A-8247-59E1F86743B8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.2:r6.0:*:*:*:*:*:*",
              "matchCriteriaId": "784ADC67-57BF-4FFA-AC13-5F2F1208F39D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.2:r7.0:*:*:*:*:*:*",
              "matchCriteriaId": "E6D81535-5163-4DAD-8AAA-61F107E11EB8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.2:r7.1:*:*:*:*:*:*",
              "matchCriteriaId": "DCF535C6-97A2-4222-9BF4-A7D16E5598FF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.2:r7.2:*:*:*:*:*:*",
              "matchCriteriaId": "40209543-6A6C-4811-834F-1CBF0C13A7E1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.2:r8.0:*:*:*:*:*:*",
              "matchCriteriaId": "2B3806F4-53E6-47B2-9D16-69B566DAAD97",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.2:r8.1:*:*:*:*:*:*",
              "matchCriteriaId": "A37BEF28-D0D5-46BD-A460-32734D0D63B8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.2:r8.2:*:*:*:*:*:*",
              "matchCriteriaId": "363C9E09-EC06-4A34-8C25-97DCCAA992E1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.2:r9.0:*:*:*:*:*:*",
              "matchCriteriaId": "3AB170D9-42AF-417B-8EF8-2895F54D0AEE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.3:-:*:*:*:*:*:*",
              "matchCriteriaId": "26EF79B8-9D5D-4C00-B42A-B58BB6EDA452",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.3:r1:*:*:*:*:*:*",
              "matchCriteriaId": "2871AAD9-FC12-4E2D-B722-0F721D7FE101",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.3:r1.1:*:*:*:*:*:*",
              "matchCriteriaId": "C52DE60A-0B74-406C-B962-313E37806E89",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.3:r2:*:*:*:*:*:*",
              "matchCriteriaId": "2A319BAB-F483-4926-9700-760D8025F747",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.3:r2.1:*:*:*:*:*:*",
              "matchCriteriaId": "AA6BD7FD-29A3-468C-8A85-63202EB1B625",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.3:r3:*:*:*:*:*:*",
              "matchCriteriaId": "00AA23DF-CA30-41FC-9563-C95BA7D31129",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.3:r4:*:*:*:*:*:*",
              "matchCriteriaId": "D85A6292-EE41-487C-A1DC-0E8E443A8075",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.3:r5:*:*:*:*:*:*",
              "matchCriteriaId": "2D829F28-4FFF-40C9-AF62-455BA5BB4E58",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.3:r5.1:*:*:*:*:*:*",
              "matchCriteriaId": "8DC693D8-D12B-4A0B-808A-A0808BAA33DD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.3:r5.2:*:*:*:*:*:*",
              "matchCriteriaId": "3837BB6E-5236-4B2D-9693-4DE85C7845C3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.3:r6:*:*:*:*:*:*",
              "matchCriteriaId": "72430B2F-A311-4DF7-ABBB-1EE0BAF507FD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.3:r6.1:*:*:*:*:*:*",
              "matchCriteriaId": "B7FCDCCF-8509-431A-B450-B18C110AAE19",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:8.3:r7:*:*:*:*:*:*",
              "matchCriteriaId": "718B6320-E7BE-4715-A446-541D1AADA027",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:9.0:r1:*:*:*:*:*:*",
              "matchCriteriaId": "D47D09A8-4AC4-4CD9-B648-5F26453E2E1D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:9.0:r2:*:*:*:*:*:*",
              "matchCriteriaId": "59331DC5-FF5F-4BB3-905E-5A4A621F86ED",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:9.0:r2.1:*:*:*:*:*:*",
              "matchCriteriaId": "6A708C3F-9050-4475-95B3-4785D3E2CB69",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:9.0:r3:*:*:*:*:*:*",
              "matchCriteriaId": "52851AAA-88FB-40BC-B41A-B821F6BA9F79",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:9.0:r3.1:*:*:*:*:*:*",
              "matchCriteriaId": "F05DC11E-7C41-450B-A2BF-603E9252BB40",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:9.0:r3.2:*:*:*:*:*:*",
              "matchCriteriaId": "5DA976D9-A330-475E-B8C0-09EF3E08F18D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:connect_secure:9.0:r3.3:*:*:*:*:*:*",
              "matchCriteriaId": "59F4A6F7-A6D4-4517-A316-7C7C002A9ED3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:policy_secure:9.0:r1:*:*:*:*:*:*",
              "matchCriteriaId": "26B25B34-7BD0-471B-A396-45CE5420E963",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:policy_secure:9.0:r2:*:*:*:*:*:*",
              "matchCriteriaId": "AA514C05-2834-4C7B-B022-02B41C9AAD6A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:policy_secure:9.0:r2.1:*:*:*:*:*:*",
              "matchCriteriaId": "0929C645-DACB-4341-9032-7C79FFC8BCF0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:policy_secure:9.0:r3:*:*:*:*:*:*",
              "matchCriteriaId": "0D36CB5A-8389-4F2F-882A-4E8F30028799",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:policy_secure:9.0:r3.1:*:*:*:*:*:*",
              "matchCriteriaId": "517DA74B-9D69-45E1-A707-A08A305A507C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "45491FB0-2EDC-4B62-838F-A8CB2E92F4FD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "F62EC1F3-10DC-4387-B4DA-8EA8086EA390",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "75A2801C-029F-469C-9492-9AB0535B1F6C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "219B113E-88AB-4250-81BB-3735A49A09C8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "84885E71-5C0D-4869-97A5-B8F955FBE728",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r3.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "D8F5AB09-D5D3-4499-BDE8-6471F827D825",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "09FF5E94-07F5-416C-976F-4FF22141A145",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "E77318F9-AA30-4010-A351-98A3942DA8DD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D328C58-51A0-4A62-8CFC-BAA5A9D8EDF3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "F3015D79-3AD8-4EBE-A236-6ADEC2AA4B6C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "A8BFFFF2-BA60-483A-BD7E-041EDD1932E3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "D04A72C3-2735-4F83-8F91-82405C16FE40",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r9.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "2A100AF1-A8A7-4E0A-9D29-E00C56C0AAFE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r10.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "596A0CEE-44FD-4A03-8386-750D0E4947D0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r11.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "BEDA32E5-A047-49FD-A52C-FDA132881337",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r11.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "65900FCC-9DD2-4606-B125-451946734453",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r12.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "EB8051E3-A7F0-4E17-AB73-E4F1DBD6FB78",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r12.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "5A3DEE0B-048F-4FE8-A508-043D87F54611",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r13.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "262F4B72-D73E-41B4-B62A-39AD505412D1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r14.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "3DF64796-2698-48EF-AF93-86F070967C98",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "6A42EFC8-C5FF-4397-87CF-263813FAA5D7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C952B5B8-DCAB-476A-9E60-3F1BBE509F21",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F199F01-9EEA-4184-AD99-6B21110484AB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r3.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "9938EBCC-B9B7-4FB1-9ACB-9BED485AB5E2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "9B4A309B-ACB0-4053-909A-6889129EB2C1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "D8A4A105-EBF3-4895-9ABE-50972DD232F8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "4013CA1C-48F0-46F6-B327-E6B34311A7EA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "112B9736-336D-4C72-A960-0B33DD3439EF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r7.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "49FA8DC5-900B-4A53-AF55-410A7FF901E9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "A4946BBE-E449-4F89-910C-3389BDF36071",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "1FDBD7BC-C9A7-48C2-B3BC-8E2C90F54268",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r9.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "C4B56D6E-2429-4511-8FE6-A9BE1226F031",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r10.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "17BD737E-F387-4239-B3C6-E4B71EB13995",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r11.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "CFC6D632-9B03-4CFF-85D8-B4127257A47E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2rx:*:*:*:*:*:*:*",
              "matchCriteriaId": "C766CBF4-502C-4522-845C-A5436DD1960D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "94170224-C78B-458A-B63E-53E303B0DCE3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "17449ADA-D4CC-4A23-9699-2D3E695C519A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "44B21A8C-F09F-4286-8E32-C10E474C8D3F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "8654C226-F77A-464D-9AD1-010DC11F8C46",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "70F3AFCF-8723-4F80-89A2-BC9D62CE920E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "545F18AB-635E-47C0-ACFE-8B2A849253FF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "52DD6EDE-5CF1-4BD9-93B7-8100ED9DDC3F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "6D74E173-3599-4A32-BE9A-482998800122",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "116DD35E-B83E-4865-8B54-E5C68D148187",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "7D02A7DF-69CE-426B-8153-3BA404B4AC64",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "DA199898-3820-4B6C-ADF6-9EA0E8238200",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "A37EBB8A-48E0-4092-A5E4-ABA0C02934AD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "9EAEBC16-AA55-4145-8FD4-84217DE4CB6D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r8.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "EF3A87EB-CEF3-4CE3-A258-EE95560D46F2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r8.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "7B273CCA-CFA6-4A73-99D1-44A51ADBAF00",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "B5E92137-41D4-4350-AD8D-B2F36FBA5B41",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r10.:*:*:*:*:*:*:*",
              "matchCriteriaId": "18E78ACD-828A-421D-88B7-C08079CD39A5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r11.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "60129D21-0A5D-44B6-A9F0-C97E3327C58D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r12.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "13477A91-0880-4CDA-A932-12912909E1AF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3rx:*:*:*:*:*:*:*",
              "matchCriteriaId": "1E78343D-6F53-44C0-8C45-694E6D03DB95",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r1:*:*:*:*:*:*:*",
              "matchCriteriaId": "C7F2FFEC-F243-4D85-888E-339C60B3C0CE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r2:*:*:*:*:*:*:*",
              "matchCriteriaId": "6A841849-DA0E-4BAA-8807-F42481C9457D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "2EC5A497-1FA2-4AE4-A611-553129B9F78C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r3:*:*:*:*:*:*:*",
              "matchCriteriaId": "479B25A4-59AA-4FA4-B1CC-E06781D00962",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r4:*:*:*:*:*:*:*",
              "matchCriteriaId": "91C0556B-2420-46F2-A08E-EC83DA514A69",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r5:*:*:*:*:*:*:*",
              "matchCriteriaId": "479C0704-9FE5-42D6-8968-780391708F44",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "ABE3B07D-879B-4AF2-9AA7-D9F64A577373",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r6:*:*:*:*:*:*:*",
              "matchCriteriaId": "497631E3-0E1F-4267-8ADA-7697FF0BF7EF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r6.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "7FF444E5-2EEA-4223-85E1-B2EA6D0543E7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r7:*:*:*:*:*:*:*",
              "matchCriteriaId": "1DA2AD75-A6DD-48D0-83E7-A5F00F31C010",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4rx:*:*:*:*:*:*:*",
              "matchCriteriaId": "07A6F2EF-09AF-4DAA-A552-6111C51DD210",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands."
    },
    {
      "lang": "es",
      "value": "En Pulse Secure Pulse Connect Secure versiones 9.0RX anteriores a 9.0R3.4, versiones 8.3RX anteriores a 8.3R7.1, versiones 8.2RX anteriores a 8.2R12.1, y versiones 8.1RX anteriores a 8.1R15.1; Pulse Policy Secure versiones 9.0RX anteriores a 9.0R3.2, versiones 5.4RX anteriores a 5.4R7.1, versiones 5.3RX anteriores a 5.3R12.1, versiones 5.2RX anteriores a 5.2R12.1, y versiones 5.1RX anteriores a 5.1R15.1, la interfaz web de administraci\u00f3n permite a un atacante autenticado inyectar y ejecutar comandos."
    }
  ],
  "id": "CVE-2019-11539",
  "lastModified": "2026-06-17T02:13:07.580",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "SINGLE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 6.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.0,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 1.3,
        "impactScore": 6.0,
        "source": "cve@mitre.org",
        "type": "Secondary"
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.2,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.2,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2019-11539",
          "options": [
            {
              "exploitation": "active"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2025-02-03T15:40:52.619006Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2019-04-26T02:29:00.300",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://packetstormsecurity.com/files/154376/Pulse-Secure-8.1R15.1-8.2-8.3-9.0-SSL-VPN-Remote-Code-Execution.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://packetstormsecurity.com/files/155277/Pulse-Secure-VPN-Arbitrary-Command-Execution.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://packetstormsecurity.com/files/162092/Pulse-Secure-VPN-Arbitrary-Command-Execution.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/108073"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "Vendor Advisory"
      ],
      "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "https://www.kb.cert.org/vuls/id/927237"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://packetstormsecurity.com/files/154376/Pulse-Secure-8.1R15.1-8.2-8.3-9.0-SSL-VPN-Remote-Code-Execution.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://packetstormsecurity.com/files/155277/Pulse-Secure-VPN-Arbitrary-Command-Execution.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://packetstormsecurity.com/files/162092/Pulse-Secure-VPN-Arbitrary-Command-Execution.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/108073"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "Vendor Advisory"
      ],
      "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "https://www.kb.cert.org/vuls/id/927237"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "US Government Resource"
      ],
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11539"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}

GHSA-MCHX-P635-VPQ8

Vulnerability from github – Published: 2022-05-24 16:44 – Updated: 2025-10-22 00:31

Details

Severity

7.2 (High)


                  
                    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2019-11539"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-78"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2019-04-26T02:29:00Z",
    "severity": "HIGH"
  },
  "details": "In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.",
  "id": "GHSA-mchx-p635-vpq8",
  "modified": "2025-10-22T00:31:39Z",
  "published": "2022-05-24T16:44:44Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11539"
    },
    {
      "type": "WEB",
      "url": "https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study"
    },
    {
      "type": "WEB",
      "url": "https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf"
    },
    {
      "type": "WEB",
      "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101"
    },
    {
      "type": "WEB",
      "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010"
    },
    {
      "type": "WEB",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11539"
    },
    {
      "type": "WEB",
      "url": "https://www.kb.cert.org/vuls/id/927237"
    },
    {
      "type": "WEB",
      "url": "http://packetstormsecurity.com/files/154376/Pulse-Secure-8.1R15.1-8.2-8.3-9.0-SSL-VPN-Remote-Code-Execution.html"
    },
    {
      "type": "WEB",
      "url": "http://packetstormsecurity.com/files/155277/Pulse-Secure-VPN-Arbitrary-Command-Execution.html"
    },
    {
      "type": "WEB",
      "url": "http://packetstormsecurity.com/files/162092/Pulse-Secure-VPN-Arbitrary-Command-Execution.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/108073"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2019-11539

Vulnerability from gsd - Updated: 2023-12-13 01:24

Details

Aliases

CVE-2019-11539

Aliases

CVE-2019-11539

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2019-11539",
    "description": "In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.",
    "id": "GSD-2019-11539",
    "references": [
      "https://packetstormsecurity.com/files/cve/CVE-2019-11539"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2019-11539"
      ],
      "details": "In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.",
      "id": "GSD-2019-11539",
      "modified": "2023-12-13T01:24:02.178406Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cisa.gov": {
      "cveID": "CVE-2019-11539",
      "dateAdded": "2021-11-03",
      "dueDate": "2022-05-03",
      "product": "Pulse Connect Secure, Policy Secure",
      "requiredAction": "Apply updates per vendor instructions.",
      "shortDescription": "Pulse Secure\u0027s Connect and Policy secure platforms contain a vulnerability in the admin web interface which allows an attacker to inject and execute commands.",
      "vendorProject": "Pulse Secure",
      "vulnerabilityName": "Pulse Connect Secure and Policy Secure Multiple Versions Code Execution"
    },
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2019-11539",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands."
          }
        ]
      },
      "impact": {
        "cvss": {
          "attackComplexity": "HIGH",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AC:H/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N",
          "version": "3.0"
        }
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101",
            "refsource": "CONFIRM",
            "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101"
          },
          {
            "name": "108073",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/108073"
          },
          {
            "name": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010",
            "refsource": "CONFIRM",
            "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010"
          },
          {
            "name": "https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf",
            "refsource": "MISC",
            "url": "https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf"
          },
          {
            "name": "http://packetstormsecurity.com/files/154376/Pulse-Secure-8.1R15.1-8.2-8.3-9.0-SSL-VPN-Remote-Code-Execution.html",
            "refsource": "MISC",
            "url": "http://packetstormsecurity.com/files/154376/Pulse-Secure-8.1R15.1-8.2-8.3-9.0-SSL-VPN-Remote-Code-Execution.html"
          },
          {
            "name": "https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/",
            "refsource": "MISC",
            "url": "https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/"
          },
          {
            "name": "VU#927237",
            "refsource": "CERT-VN",
            "url": "https://www.kb.cert.org/vuls/id/927237"
          },
          {
            "name": "http://packetstormsecurity.com/files/155277/Pulse-Secure-VPN-Arbitrary-Command-Execution.html",
            "refsource": "MISC",
            "url": "http://packetstormsecurity.com/files/155277/Pulse-Secure-VPN-Arbitrary-Command-Execution.html"
          },
          {
            "name": "http://packetstormsecurity.com/files/162092/Pulse-Secure-VPN-Arbitrary-Command-Execution.html",
            "refsource": "MISC",
            "url": "http://packetstormsecurity.com/files/162092/Pulse-Secure-VPN-Arbitrary-Command-Execution.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "cve": {
        "cisaActionDue": "2022-05-03",
        "cisaExploitAdd": "2021-11-03",
        "cisaRequiredAction": "Apply updates per vendor instructions.",
        "cisaVulnerabilityName": "Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability",
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:ivanti:connect_secure:8.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "202E4839-7CE4-49CE-BEE1-CB33A96770E7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:ivanti:connect_secure:8.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A2BCE3E8-ED64-4CCD-9A3F-3D99476B81E1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:ivanti:connect_secure:8.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AB453513-AFEA-4E68-8441-3984E83FFB2F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.1r1.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E2037BE1-408C-47E8-8A70-8440BF3A1ED6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r1.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D7369296-0C10-4B64-A0EC-2E7BFAC5BB40",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r1.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F13F586F-A5FA-424F-B172-14FC29402F59",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r2.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D6BE71A8-1C4A-4CE0-A78C-DCF72E6775BA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r3.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "51E0AC17-77DE-440F-8166-FD3A8D039EB7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r3.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2A7A8628-6636-485E-B888-A13D732D87C7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r4.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8DB60BAE-D42E-4953-822D-C9B4CF83EA9D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r4.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9A9BB556-DADF-49F0-BEF2-84629EC430FF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r5.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E9AB1607-3B0C-49A8-95E0-68FB8DF6432B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r5.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1ACA79EE-8F71-4805-B4D4-72B40EE7933D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r6.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "261B6197-161F-4141-B5D1-95160AFA3B45",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r7.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7FE79E96-37CA-46F5-B14C-9024E4D7CD25",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2r7.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A559BDBF-FEE2-4DC2-B4D8-597DD78332DB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.2rx:*:*:*:*:*:*:*",
                    "matchCriteriaId": "97B87335-3883-4B3F-863E-A1E3E7541049",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:8.3rx:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DD77C208-DD3E-46BD-930F-93BB39799D08",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "47D68BA7-3626-4D54-B6B3-ED0C2F25ADC1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "190F575A-E9D4-403B-9AAC-D665D80B37D3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r2.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "37B522EA-2724-4D88-89FE-8A3E1297313E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6444B34E-C3E3-4959-8C5D-ACF5FF65D2DE",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r3.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6DF9BB1A-07D4-4757-BC09-49CCC044CE92",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0r3.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0F4694C1-667B-4BAC-ABF1-92AE4FD26893",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:9.0rx:*:*:*:*:*:*:*",
                    "matchCriteriaId": "59FE2F01-1675-45FB-90ED-A7A8C3E79114",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r1.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "45491FB0-2EDC-4B62-838F-A8CB2E92F4FD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r1.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F62EC1F3-10DC-4387-B4DA-8EA8086EA390",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r2.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "75A2801C-029F-469C-9492-9AB0535B1F6C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r2.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "219B113E-88AB-4250-81BB-3735A49A09C8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r3.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "84885E71-5C0D-4869-97A5-B8F955FBE728",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r3.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D8F5AB09-D5D3-4499-BDE8-6471F827D825",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r4.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "09FF5E94-07F5-416C-976F-4FF22141A145",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r5.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E77318F9-AA30-4010-A351-98A3942DA8DD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r6.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9D328C58-51A0-4A62-8CFC-BAA5A9D8EDF3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r7.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F3015D79-3AD8-4EBE-A236-6ADEC2AA4B6C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r8.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A8BFFFF2-BA60-483A-BD7E-041EDD1932E3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r9.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D04A72C3-2735-4F83-8F91-82405C16FE40",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r9.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2A100AF1-A8A7-4E0A-9D29-E00C56C0AAFE",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r10.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "596A0CEE-44FD-4A03-8386-750D0E4947D0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r11.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BEDA32E5-A047-49FD-A52C-FDA132881337",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r11.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "65900FCC-9DD2-4606-B125-451946734453",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r12.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EB8051E3-A7F0-4E17-AB73-E4F1DBD6FB78",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r12.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5A3DEE0B-048F-4FE8-A508-043D87F54611",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r13.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "262F4B72-D73E-41B4-B62A-39AD505412D1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r14.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3DF64796-2698-48EF-AF93-86F070967C98",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r1.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6A42EFC8-C5FF-4397-87CF-263813FAA5D7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r2.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C952B5B8-DCAB-476A-9E60-3F1BBE509F21",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r3.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7F199F01-9EEA-4184-AD99-6B21110484AB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r3.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9938EBCC-B9B7-4FB1-9ACB-9BED485AB5E2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r4.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9B4A309B-ACB0-4053-909A-6889129EB2C1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r5.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D8A4A105-EBF3-4895-9ABE-50972DD232F8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r6.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4013CA1C-48F0-46F6-B327-E6B34311A7EA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r7.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "112B9736-336D-4C72-A960-0B33DD3439EF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r7.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "49FA8DC5-900B-4A53-AF55-410A7FF901E9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r8.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A4946BBE-E449-4F89-910C-3389BDF36071",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r9.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1FDBD7BC-C9A7-48C2-B3BC-8E2C90F54268",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r9.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C4B56D6E-2429-4511-8FE6-A9BE1226F031",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r10.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "17BD737E-F387-4239-B3C6-E4B71EB13995",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r11.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CFC6D632-9B03-4CFF-85D8-B4127257A47E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2rx:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C766CBF4-502C-4522-845C-A5436DD1960D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r1.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "94170224-C78B-458A-B63E-53E303B0DCE3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r1.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "17449ADA-D4CC-4A23-9699-2D3E695C519A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r2.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "44B21A8C-F09F-4286-8E32-C10E474C8D3F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r3.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8654C226-F77A-464D-9AD1-010DC11F8C46",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r3.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "70F3AFCF-8723-4F80-89A2-BC9D62CE920E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r4.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "545F18AB-635E-47C0-ACFE-8B2A849253FF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r4.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "52DD6EDE-5CF1-4BD9-93B7-8100ED9DDC3F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r5.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6D74E173-3599-4A32-BE9A-482998800122",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r5.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "116DD35E-B83E-4865-8B54-E5C68D148187",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r5.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7D02A7DF-69CE-426B-8153-3BA404B4AC64",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r6.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DA199898-3820-4B6C-ADF6-9EA0E8238200",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r7.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A37EBB8A-48E0-4092-A5E4-ABA0C02934AD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r8.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9EAEBC16-AA55-4145-8FD4-84217DE4CB6D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r8.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EF3A87EB-CEF3-4CE3-A258-EE95560D46F2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r8.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7B273CCA-CFA6-4A73-99D1-44A51ADBAF00",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r9.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B5E92137-41D4-4350-AD8D-B2F36FBA5B41",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r10.:*:*:*:*:*:*:*",
                    "matchCriteriaId": "18E78ACD-828A-421D-88B7-C08079CD39A5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r11.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "60129D21-0A5D-44B6-A9F0-C97E3327C58D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r12.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "13477A91-0880-4CDA-A932-12912909E1AF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3rx:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1E78343D-6F53-44C0-8C45-694E6D03DB95",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C7F2FFEC-F243-4D85-888E-339C60B3C0CE",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6A841849-DA0E-4BAA-8807-F42481C9457D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r2.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2EC5A497-1FA2-4AE4-A611-553129B9F78C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "479B25A4-59AA-4FA4-B1CC-E06781D00962",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "91C0556B-2420-46F2-A08E-EC83DA514A69",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "479C0704-9FE5-42D6-8968-780391708F44",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r5.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "ABE3B07D-879B-4AF2-9AA7-D9F64A577373",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "497631E3-0E1F-4267-8ADA-7697FF0BF7EF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r6.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7FF444E5-2EEA-4223-85E1-B2EA6D0543E7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r7:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1DA2AD75-A6DD-48D0-83E7-A5F00F31C010",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4rx:*:*:*:*:*:*:*",
                    "matchCriteriaId": "07A6F2EF-09AF-4DAA-A552-6111C51DD210",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:9.0r1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8C50D348-E894-4B8D-ACFF-DE04FB47A97B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:9.0r2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "436C11B9-1A19-4751-877C-104370C769A3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:9.0r2.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "10F709A2-79F6-4912-9B81-6EBF9E0D438E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:9.0r3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B694A761-C3DC-41C9-8FFA-271950BEFE60",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:9.0r3.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BE48A776-5899-47E8-8B1C-B046594E6084",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:9.0rx:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BB7BB3D9-7259-4DF3-B408-AE421CE206D4",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "descriptions": [
          {
            "lang": "en",
            "value": "In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands."
          },
          {
            "lang": "es",
            "value": "En Pulse Secure Pulse Connect Secure versiones 9.0RX anteriores a 9.0R3.4, versiones 8.3RX anteriores a 8.3R7.1, versiones 8.2RX anteriores a 8.2R12.1, y versiones 8.1RX anteriores a 8.1R15.1; Pulse Policy Secure versiones 9.0RX anteriores a 9.0R3.2, versiones 5.4RX anteriores a 5.4R7.1, versiones 5.3RX anteriores a 5.3R12.1, versiones 5.2RX anteriores a 5.2R12.1, y versiones 5.1RX anteriores a 5.1R15.1, la interfaz web de administraci\u00f3n permite a un atacante autenticado inyectar y ejecutar comandos."
          }
        ],
        "id": "CVE-2019-11539",
        "lastModified": "2024-02-27T21:04:17.560",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "SINGLE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 6.5,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 8.0,
              "impactScore": 6.4,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV30": [
            {
              "cvssData": {
                "attackComplexity": "HIGH",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 8.0,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.0"
              },
              "exploitabilityScore": 1.3,
              "impactScore": 6.0,
              "source": "cve@mitre.org",
              "type": "Secondary"
            }
          ],
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.2,
              "impactScore": 5.9,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2019-04-26T02:29:00.300",
        "references": [
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://packetstormsecurity.com/files/154376/Pulse-Secure-8.1R15.1-8.2-8.3-9.0-SSL-VPN-Remote-Code-Execution.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://packetstormsecurity.com/files/155277/Pulse-Secure-VPN-Arbitrary-Command-Execution.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://packetstormsecurity.com/files/162092/Pulse-Secure-VPN-Arbitrary-Command-Execution.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securityfocus.com/bid/108073"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Exploit",
              "Third Party Advisory"
            ],
            "url": "https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Exploit",
              "Third Party Advisory"
            ],
            "url": "https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "Vendor Advisory"
            ],
            "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "US Government Resource"
            ],
            "url": "https://www.kb.cert.org/vuls/id/927237"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-78"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2019-11539 (GCVE-0-2019-11539)

CISA

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Vendor Report Successful Exploitation Confidence: 80% Source: cisa-kev

Details

References

KEVIntel

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Public Report Confirmed Compromise Confidence: 70% Source: kevintel

Details

References

BDU:2023-00990

FKIE_CVE-2019-11539

GHSA-MCHX-P635-VPQ8

GSD-2019-11539

Tags

Sightings

Nomenclature