Pulse Connect Secure Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Version

8.3R7	12
9.1R11	12
8.3R1	10
9.0R3.0	10
9.0R3.1	10

Remediation

Official Fix	58
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	8

Exploitability

High	12
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	54

Access Vector

Not Defined	0
Physical	2
Local	4
Adjacent	10
Network	50

Authentication

Not Defined	0
High	14
Low	22
None	30

User Interaction

Not Defined	0
Required	18
None	48

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	2
≤4	4
≤5	12
≤6	16
≤7	12
≤8	6
≤9	12
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	2
≤4	4
≤5	16
≤6	12
≤7	12
≤8	6
≤9	12
≤10	2

VulDB

≤1	0
≤2	0
≤3	2
≤4	6
≤5	24
≤6	8
≤7	10
≤8	12
≤9	2
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	4
≤6	6
≤7	12
≤8	10
≤9	6
≤10	12

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	0
≤8	2
≤9	6
≤10	2

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	24
<2k	30
<5k	12
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Today

<1k	66
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Versions (39): 7.0, 7.1, 7.1R22, 7.2, 7.3, 7.4, 8.0R10, 8.0R16, 8.1.R15, 8.1R2, 8.1R11, 8.1R12, 8.1R13, 8.1R15, 8.2R8, 8.2R10, 8.2R12, 8.3R1, 8.3R2, 8.3R3, 8.3R4, 8.3R7, 9.0R2, 9.0R3, 9.0R3.1, 9.0R3.2, 9.0R3.3, 9.1R2, 9.1R4, 9.1R7, 9.1R8, 9.1R8.1, 9.1R11, 9.1R11.1, 9.1R11.2, 9.1R11.3, 9.1R12, 9.115, 2020-04-06

Software Type: Network Encryption Software

Published	Base	Temp	Vulnerability	0day	Today	Exp	Rem	CTI	CVE
10/01/2022	5.5	5.5	Ivanti Pulse Connect Secure Header request smuggling	$0-$5k	$0-$5k	Not Defined	Not Defined	0.07	CVE-2022-21826
08/12/2022	2.7	2.6	Ivanti Pulse Connect Secure Push Configuration targets.cgi source code	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-44720
11/20/2021	5.9	5.8	Ivanti Pulse Connect Secure resource consumption	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2021-22965
08/17/2021	4.3	4.1	Ivanti Pulse Connect Secure Administrator Web Console command injection	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-22938
08/17/2021	4.3	4.1	Ivanti Pulse Connect Secure Administrator Web Interface unrestricted upload	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-22937
08/17/2021	3.5	3.4	Ivanti Pulse Connect Secure Web Parameter cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2021-22936
08/17/2021	4.3	4.1	Ivanti Pulse Connect Secure Web Parameter command injection	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-22935
08/17/2021	4.3	4.1	Ivanti Pulse Connect Secure Web Request buffer overflow	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-22934
08/17/2021	3.5	3.4	Ivanti Pulse Connect Secure Web Request path traversal	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-22933
05/28/2021	4.7	4.5	Ivanti Pulse Connect Secure Administrator Web Interface unrestricted upload	$0-$5k	$0-$5k	High	Official Fix	0.04	CVE-2021-22900