CASCACascade Atlas

Evidence dossier

CVE-2019-11539

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX…

Exploited in the wild (CISA KEV since Nov 3, 2021). NVD reports CVSS 3.1 7.2. EPSS estimates 98.6% exploit likelihood as of Jul 26, 2026.

82.7–83.6Priority evidence range
Evidence current through Aug 27, 2026, 6:09 PM UTC

As of Aug 27, 2026

Normalized restatement

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.

State
PUBLISHED
Published
Apr 26, 2019
Updated
Oct 21, 2025
Evidence coverage
99%

Evidence chronology

What was known when

Download this view's receipt →
  1. Source dateSource date omittedFirst observed by CASCA
    CISA-ADP

    Record text: CISA ADP Vulnrichment

    Inspect raw assertion
    Field
    container
    Value
    CISA ADP Vulnrichment
    Original evidence ↗
  2. Source dateSource date omittedFirst observed by CASCA
    CVE Program

    Record text: CVE Program Container

    Inspect raw assertion
    Field
    container
    Value
    CVE Program Container
    Original evidence ↗
  3. Source dateSource date omittedFirst observed by CASCA
    mitre

    Record text: In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.

    Inspect raw assertion
    Field
    container
    Value
    In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.
    Original evidence ↗
  4. Source dateFirst observed by CASCA
    CISA KEV

    Exploitation cataloged: Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability

    Inspect raw assertion
    Field
    observed_exploitation
    Value
    Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability
    Original evidence ↗
  5. Source dateFirst observed by CASCA
    FIRST EPSS

    EPSS score: 98.62% probability · 99.92th percentile

    Inspect raw assertion
    Field
    model_probability
    Value
    Probability 0.986170000000; percentile 0.999190000000
    Original evidence ↗
ExploitationCatalog member

CISA KEV · catalog date Nov 3, 2021 · first observed Jul 19, 2026

Exploit likelihood98.62%

FIRST EPSS · score date Jul 26, 2026 · 99.9th percentile · first observed Jul 27, 2026

SeverityCVSS 7.2

NVD · CVSS 3.1 · first observed Jul 19, 2026 · same-version scores align in this snapshot

Evidence detail

Source limits and decisions

Why each evidence state has this value

Outside this view’s verified evidence

Reason detail begins outside this selected snapshot; the state remains source-bound.

Source comparison

Who said what

CISA-ADPIndependent enrichment
Record text

CISA ADP Vulnrichment

Inspect raw assertion
Field
container
Value
CISA ADP Vulnrichment
Source dateSource date omittedFirst observed by CASCAOriginal evidence ↗
CVE ProgramDerivative copy
Record text

CVE Program Container

Inspect raw assertion
Field
container
Value
CVE Program Container
Source dateSource date omittedFirst observed by CASCAOriginal evidence ↗
mitreOriginal assertion
Record text

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.

Inspect raw assertion
Field
container
Value
In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.
Source dateSource date omittedFirst observed by CASCAOriginal evidence ↗
CISA KEVOriginal assertion
Exploitation cataloged

Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability

Inspect raw assertion
Field
observed_exploitation
Value
Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability
Source dateFirst observed by CASCAOriginal evidence ↗
FIRST EPSSOriginal assertion
EPSS score

98.62% probability · 99.92th percentile

Inspect raw assertion
Field
model_probability
Value
Probability 0.986170000000; percentile 0.999190000000
Source dateFirst observed by CASCAOriginal evidence ↗

Applicability

Cited product scope

Trace impact →
138Underlying assertions
3Canonical products
138Target assertions
0Constraint assertions

Grouped from 1 configuration nodes in this exact snapshot. Visual grouping is navigational; asset exposure and root cause require cited evidence.

Identity source boundaries
  • Cpe dictionary1,775,266 records · observed through 2026-07-21T06:45:29.809Z27d65b0f-b718-4b4f-bb79-c47c68d09dfa
  • Cpe match643,502 records · observed through 2026-07-21T08:13:17.697Z955dae73-7302-438b-aee1-058d7cc5d48e

4 scope groups

mitre · source assertedn/an/aDirect source scope
Affected: n/a
Source-reported scope

Canonical linkage remains open; the cited source assertion is retained below.

Inspect raw assertion[{"status": "affected", "version": "n/a"}]
NVD CPE · APPLICATIONivanticonnect_secureVulnerable target · 67 assertions
Version 8.1; Version 8.2; Version 8.3; Version 9.0Canonical identity product-0675def37879dcf14a27022586db7f5234f5d2c3f293e3a70a47a5da19da3b1bLinked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:a:ivanti:connect_secure:8.2:r5.1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 38
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    35f94103-0db3-4d3a-8247-59e1f86743b8
  2. cpe:2.3:a:ivanti:connect_secure:8.1:r2.0:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 10
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    d56b8268-81d1-4cc0-a115-0cdfe8acd59d
  3. cpe:2.3:a:ivanti:connect_secure:8.1:r1.0:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 1
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    9bf1434f-bc2f-4c63-b3cb-bbc14f95e0ee
  4. cpe:2.3:a:ivanti:connect_secure:8.1:r11.0:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 4
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    91b0f725-70cd-4cf4-af35-4deb24f7e3e1
  5. cpe:2.3:a:ivanti:connect_secure:9.0:r3.3:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 66
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    59f4a6f7-a6d4-4517-a316-7c7c002a9ed3
  6. cpe:2.3:a:ivanti:connect_secure:8.2:r8.0:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 43
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    2b3806f4-53e6-47b2-9d16-69b566daad97
  7. cpe:2.3:a:ivanti:connect_secure:8.3:r3:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 52
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    00aa23df-ca30-41fc-9563-c95ba7d31129
  8. cpe:2.3:a:ivanti:connect_secure:8.1:r5.0:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 17
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    84418011-9d3f-4c72-b911-a6e4cea171f3
  9. cpe:2.3:a:ivanti:connect_secure:8.2:r8.2:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 45
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    363c9e09-ec06-4a34-8c25-97dccaa992e1
  10. cpe:2.3:a:ivanti:connect_secure:8.1:r7.0:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 20
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    b3a09079-5587-4fb1-9ec2-f6e44d523cb7
  11. cpe:2.3:a:ivanti:connect_secure:8.1:r12.0:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 6
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    46f9cebb-08ad-42dd-8cee-6f1c555d1608
  12. cpe:2.3:a:ivanti:connect_secure:9.0:r3.1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 64
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    f05dc11e-7c41-450b-a2bf-603e9252bb40
  13. cpe:2.3:a:ivanti:connect_secure:8.2:r1.1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 28
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    183e1dd7-ee4b-47c4-99e2-cd06ed2e0d4f
  14. cpe:2.3:a:ivanti:connect_secure:8.3:r5.2:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 56
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    3837bb6e-5236-4b2d-9693-4de85c7845c3
  15. cpe:2.3:a:ivanti:connect_secure:8.1:r9.0:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 22
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    c5465537-625d-4a9d-8787-ff4744681ba8
  16. cpe:2.3:a:ivanti:connect_secure:8.2:r10.0:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 29
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    00f4df7b-ed7f-46fc-8b12-5527fb5a4305
  17. cpe:2.3:a:ivanti:connect_secure:8.2:r6.0:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 39
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    784adc67-57bf-4ffa-ac13-5f2f1208f39d
  18. cpe:2.3:a:ivanti:connect_secure:8.2:r12.0:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 31
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    970c2bee-5798-4a5f-8d4e-7970bfcf0cd2
  19. cpe:2.3:a:ivanti:connect_secure:8.2:r2.0:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 32
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    1d187ddb-96c8-4435-992e-cfeee24bc7c5
  20. cpe:2.3:a:ivanti:connect_secure:8.1:r3.2:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 14
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    2636bbd1-d46f-4ea2-a460-a343443f838a
  21. cpe:2.3:a:ivanti:connect_secure:9.0:r2:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 61
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    59331dc5-ff5f-4bb3-905e-5a4a621f86ed
  22. cpe:2.3:a:ivanti:connect_secure:8.3:-:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 47
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    26ef79b8-9d5d-4c00-b42a-b58bb6eda452
  23. cpe:2.3:a:ivanti:connect_secure:8.1:r7:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 19
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    ea6054ec-a05f-46b4-9056-5719b2db7efb
  24. cpe:2.3:a:ivanti:connect_secure:8.2:r11.0:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 30
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    4a5af6a0-6613-4b15-a1a3-aeac0ef7e374
  25. cpe:2.3:a:ivanti:connect_secure:8.1:r13.0:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 8
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    91884bc5-280f-4e39-88e0-e7c4f6519d71
  26. cpe:2.3:a:ivanti:connect_secure:8.3:r6.1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 58
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    b7fcdccf-8509-431a-b450-b18c110aae19
  27. cpe:2.3:a:ivanti:connect_secure:8.2:r4.0:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 35
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    3f7455ad-e662-4817-a343-9acce763b78e
  28. cpe:2.3:a:ivanti:connect_secure:8.3:r1.1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 49
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    c52de60a-0b74-406c-b962-313e37806e89
  29. cpe:2.3:a:ivanti:connect_secure:9.0:r3.2:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 65
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    5da976d9-a330-475e-b8c0-09ef3e08f18d
  30. cpe:2.3:a:ivanti:connect_secure:8.3:r4:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 53
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    d85a6292-ee41-487c-a1dc-0e8e443a8075
  31. cpe:2.3:a:ivanti:connect_secure:8.1:r8.0:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 21
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    8fb98cd3-e968-4336-81bd-0132dbd7462c
  32. cpe:2.3:a:ivanti:connect_secure:8.3:r2:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 50
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    2a319bab-f483-4926-9700-760d8025f747
  33. cpe:2.3:a:ivanti:connect_secure:8.1:r2.1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 11
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    b10e91cd-0fcc-4def-8043-38819c597934
  34. cpe:2.3:a:ivanti:connect_secure:9.0:r3:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 63
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    52851aaa-88fb-40bc-b41a-b821f6ba9f79
  35. cpe:2.3:a:ivanti:connect_secure:8.1:r4.1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 16
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    069b315b-ff97-4f3c-a1ab-831e6cd5f94c
  36. cpe:2.3:a:ivanti:connect_secure:8.3:r5:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 54
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    2d829f28-4fff-40c9-af62-455ba5bb4e58
  37. cpe:2.3:a:ivanti:connect_secure:8.1:r9.2:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 24
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    1243fdda-6d64-408e-8911-fa1d37a915ed
  38. cpe:2.3:a:ivanti:connect_secure:8.1:r14.0:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 9
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    3e3f03f7-a3ce-4e98-95a7-43906ffe7959
  39. cpe:2.3:a:ivanti:connect_secure:8.2:r8.1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 44
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    a37bef28-d0d5-46bd-a460-32734d0d63b8
  40. cpe:2.3:a:ivanti:connect_secure:8.1:r12.1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 7
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    bf7844c4-7a48-49d1-a924-2c546e9c6bb6
  41. cpe:2.3:a:ivanti:connect_secure:9.0:r1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 60
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    d47d09a8-4ac4-4cd9-b648-5f26453e2e1d
  42. cpe:2.3:a:ivanti:connect_secure:8.1:r9.1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 23
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    96a2e24d-5ee5-46cf-aaa0-8474c4f641f6
  43. cpe:2.3:a:ivanti:connect_secure:8.2:r3.1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 34
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    761102e8-04db-465a-a592-98c5f5e0adfa
  44. cpe:2.3:a:ivanti:connect_secure:8.2:r7.0:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 40
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    e6d81535-5163-4dad-8aaa-61f107e11eb8
  45. cpe:2.3:a:ivanti:connect_secure:8.2:r9.0:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 46
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    3ab170d9-42af-417b-8ef8-2895f54d0aee
  46. cpe:2.3:a:ivanti:connect_secure:8.3:r1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 48
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    2871aad9-fc12-4e2d-b722-0f721d7fe101
  47. cpe:2.3:a:ivanti:connect_secure:8.1:r1.1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 2
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    5ef31b2a-7dee-4c69-ade5-ffbf176d8dcf
  48. cpe:2.3:a:ivanti:connect_secure:8.1:r4.0:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 15
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    ecfa01a7-6ab6-4e6b-82e3-30ce8c776960
  49. cpe:2.3:a:ivanti:connect_secure:8.2:r7.1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 41
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    dcf535c6-97a2-4222-9bf4-a7d16e5598ff
  50. cpe:2.3:a:ivanti:connect_secure:8.2:r7.2:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 42
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    40209543-6a6c-4811-834f-1cbf0c13a7e1
  51. cpe:2.3:a:ivanti:connect_secure:8.2:r5.0:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 37
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    b5bf94c4-0456-4cb1-9cc5-02a316c84e09
  52. cpe:2.3:a:ivanti:connect_secure:8.1:-:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    ca1b64ec-ad68-4f55-9ca2-4a1841764cf3
  53. cpe:2.3:a:ivanti:connect_secure:8.2:r4.1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 36
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    a1f61a93-6e90-4063-bfca-166da0ddce38
  54. cpe:2.3:a:ivanti:connect_secure:8.1:r3.1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 13
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    9d3965e4-51e0-4f15-b03b-7342ea6bca63
  55. cpe:2.3:a:ivanti:connect_secure:8.3:r6:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 57
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    72430b2f-a311-4df7-abbb-1ee0baf507fd
  56. cpe:2.3:a:ivanti:connect_secure:8.1:r3.0:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 12
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    90781afb-d463-40f4-9a74-8f0256ace64f
  57. cpe:2.3:a:ivanti:connect_secure:8.3:r2.1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 51
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    aa6bd7fd-29a3-468c-8a85-63202eb1b625
  58. cpe:2.3:a:ivanti:connect_secure:8.2:r3.0:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 33
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    1ca6cbe1-cf6c-4d8c-bab3-0b78e56e85da
  59. cpe:2.3:a:ivanti:connect_secure:8.2:r1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 26
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    5f134803-a479-4dbe-b3d4-3a5d121e185f
  60. cpe:2.3:a:ivanti:connect_secure:9.0:r2.1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 62
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    6a708c3f-9050-4475-95b3-4785d3e2cb69
  61. cpe:2.3:a:ivanti:connect_secure:8.1:r6.0:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 18
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    a7d488d9-6ac7-4de4-9d65-a8e2d287dcb9
  62. cpe:2.3:a:ivanti:connect_secure:8.2:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 25
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    a2bce3e8-ed64-4ccd-9a3f-3d99476b81e1
  63. cpe:2.3:a:ivanti:connect_secure:8.3:r5.1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 55
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    8dc693d8-d12b-4a0b-808a-a0808baa33dd
  64. cpe:2.3:a:ivanti:connect_secure:8.1:r10.0:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 3
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    afc39a4d-7738-4818-9866-a34c55216401
  65. cpe:2.3:a:ivanti:connect_secure:8.3:r7:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 59
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    718b6320-e7be-4715-a446-541d1aada027
  66. cpe:2.3:a:ivanti:connect_secure:8.1:r11.1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 5
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    e6fa7630-082b-4f48-be53-981052fb7268
  67. cpe:2.3:a:ivanti:connect_secure:8.2:r1.0:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 27
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    48b04626-10a7-4a12-af3d-61c8d980aa21
NVD CPE · APPLICATIONivantipolicy_secureVulnerable target · 5 assertions
Version 9.0Canonical identity product-66735516e7e23282d6cbb1b21ef896b9b737013272849d8db9227bbeb2d5728aLinked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:a:ivanti:policy_secure:9.0:r3.1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 71
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    517da74b-9d69-45e1-a707-a08a305a507c
  2. cpe:2.3:a:ivanti:policy_secure:9.0:r1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 67
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    26b25b34-7bd0-471b-a396-45ce5420e963
  3. cpe:2.3:a:ivanti:policy_secure:9.0:r2.1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 69
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    0929c645-dacb-4341-9032-7c79ffc8bcf0
  4. cpe:2.3:a:ivanti:policy_secure:9.0:r3:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 70
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    0d36cb5a-8389-4f2f-882a-4e8f30028799
  5. cpe:2.3:a:ivanti:policy_secure:9.0:r2:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 68
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    aa514c05-2834-4c7b-b022-02b41c9aad6a
NVD CPE · APPLICATIONpulsesecurepulse_policy_secureVulnerable target · 66 assertions
Version 5.1r1.0; Version 5.1r10.0; Version 5.1r1.1; Version 5.1r11.0; Version 5.1r11.1; Version 5.1r12.0; Version 5.1r12.1; Version 5.1r13.0; Version 5.1r14.0; Version 5.1r2.0; Version 5.1r2.1; Version 5.1r3.0; Version 5.1r3.2; Version 5.1r4.0; Version 5.1r5.0; Version 5.1r6.0; Version 5.1r7.0; Version 5.1r8.0; Version 5.1r9.0; Version 5.1r9.1; Version 5.2r1.0; Version 5.2r10.0; Version 5.2r11.0; Version 5.2r2.0; Version 5.2r3.0; Version 5.2r3.2; Version 5.2r4.0; Version 5.2r5.0; Version 5.2r6.0; Version 5.2r7.0; Version 5.2r7.1; Version 5.2r8.0; Version 5.2r9.0; Version 5.2r9.1; Version 5.2rx; Version 5.3r1.0; Version 5.3r10.; Version 5.3r1.1; Version 5.3r11.0; Version 5.3r12.0; Version 5.3r2.0; Version 5.3r3.0; Version 5.3r3.1; Version 5.3r4.0; Version 5.3r4.1; Version 5.3r5.0; Version 5.3r5.1; Version 5.3r5.2; Version 5.3r6.0; Version 5.3r7.0; Version 5.3r8.0; Version 5.3r8.1; Version 5.3r8.2; Version 5.3r9.0; Version 5.3rx; Version 5.4r1; Version 5.4r2; Version 5.4r2.1; Version 5.4r3; Version 5.4r4; Version 5.4r5; Version 5.4r5.2; Version 5.4r6; Version 5.4r6.1; Version 5.4r7; Version 5.4rxCanonical identity product-3d6f676f5c0b3f81a42c0c26baf6352337bbc32fcb54d63177d375fc023a727dLinked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r11.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 86
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    beda32e5-a047-49fd-a52c-fda132881337
  2. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r1.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 108
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    17449ada-d4cc-4a23-9699-2d3e695c519a
  3. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r5.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 115
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    116dd35e-b83e-4865-8b54-e5c68d148187
  4. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r2.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 109
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    44b21a8c-f09f-4286-8e32-c10e474c8d3f
  5. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r4:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 131
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    91c0556b-2420-46f2-a08e-ec83da514a69
  6. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r7.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 81
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    f3015d79-3ad8-4ebe-a236-6adec2aa4b6c
  7. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r9.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 103
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    c4b56d6e-2429-4511-8fe6-a9be1226f031
  8. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r1.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 72
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    45491fb0-2edc-4b62-838f-a8cb2e92f4fd
  9. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r12.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 125
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    13477a91-0880-4cda-a932-12912909e1af
  10. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r8.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 101
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    a4946bbe-e449-4f89-910c-3389bdf36071
  11. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r8.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 119
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    9eaebc16-aa55-4145-8fd4-84217de4cb6d
  12. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r7.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 118
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    a37ebb8a-48e0-4092-a5e4-aba0c02934ad
  13. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 127
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    c7f2ffec-f243-4d85-888e-339c60b3c0ce
  14. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r8.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 120
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    ef3a87eb-cef3-4ce3-a258-ee95560d46f2
  15. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r4.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 96
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    9b4a309b-acb0-4053-909a-6889129eb2c1
  16. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r9.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 102
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    1fdbd7bc-c9a7-48c2-b3bc-8e2c90f54268
  17. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r2:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 128
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    6a841849-da0e-4baa-8807-f42481c9457d
  18. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r7:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 136
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    1da2ad75-a6dd-48d0-83e7-a5f00f31c010
  19. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r9.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 83
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    d04a72c3-2735-4f83-8f91-82405c16fe40
  20. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r3.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 94
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    7f199f01-9eea-4184-ad99-6b21110484ab
  21. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r9.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 84
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    2a100af1-a8a7-4e0a-9d29-e00c56c0aafe
  22. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r3.2:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 95
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    9938ebcc-b9b7-4fb1-9acb-9bed485ab5e2
  23. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r10.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 85
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    596a0cee-44fd-4a03-8386-750d0e4947d0
  24. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r2.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 74
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    75a2801c-029f-469c-9492-9ab0535b1f6c
  25. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r5.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 79
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    e77318f9-aa30-4010-a351-98a3942da8dd
  26. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r6.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 80
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    9d328c58-51a0-4a62-8cfc-baa5a9d8edf3
  27. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r9.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 122
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    b5e92137-41d4-4350-ad8d-b2f36fba5b41
  28. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r3.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 110
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    8654c226-f77a-464d-9ad1-010dc11f8c46
  29. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r5.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 114
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    6d74e173-3599-4a32-be9a-482998800122
  30. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r11.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 87
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    65900fcc-9dd2-4606-b125-451946734453
  31. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r7.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 99
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    112b9736-336d-4c72-a960-0b33dd3439ef
  32. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r6.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 98
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    4013ca1c-48f0-46f6-b327-e6b34311a7ea
  33. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r13.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 90
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    262f4b72-d73e-41b4-b62a-39ad505412d1
  34. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r3.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 76
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    84885e71-5c0d-4869-97a5-b8f955fbe728
  35. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r7.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 100
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    49fa8dc5-900b-4a53-af55-410a7ff901e9
  36. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r2.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 93
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    c952b5b8-dcab-476a-9e60-3f1bbe509f21
  37. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r11.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 124
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    60129d21-0a5d-44b6-a9f0-c97e3327c58d
  38. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r3:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 130
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    479b25a4-59aa-4fa4-b1cc-e06781d00962
  39. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4rx:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 137
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    07a6f2ef-09af-4daa-a552-6111c51dd210
  40. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r12.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 88
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    eb8051e3-a7f0-4e17-ab73-e4f1dbd6fb78
  41. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r3.2:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 77
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    d8f5ab09-d5d3-4499-bde8-6471f827d825
  42. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r4.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 113
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    52dd6ede-5cf1-4bd9-93b7-8100ed9ddc3f
  43. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r2.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 129
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    2ec5a497-1fa2-4ae4-a611-553129b9f78c
  44. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r2.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 75
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    219b113e-88ab-4250-81bb-3735a49a09c8
  45. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r14.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 91
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    3df64796-2698-48ef-af93-86f070967c98
  46. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r12.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 89
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    5a3dee0b-048f-4fe8-a508-043d87f54611
  47. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r3.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 111
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    70f3afcf-8723-4f80-89a2-bc9d62ce920e
  48. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r5.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 97
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    d8a4a105-ebf3-4895-9abe-50972dd232f8
  49. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r6:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 134
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    497631e3-0e1f-4267-8ada-7697ff0bf7ef
  50. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r5:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 132
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    479c0704-9fe5-42d6-8968-780391708f44
  51. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r1.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 73
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    f62ec1f3-10dc-4387-b4da-8ea8086ea390
  52. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r10.:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 123
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    18e78acd-828a-421d-88b7-c08079cd39a5
  53. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r5.2:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 133
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    abe3b07d-879b-4af2-9aa7-d9f64a577373
  54. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r8.2:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 121
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    7b273cca-cfa6-4a73-99d1-44a51adbaf00
  55. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r8.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 82
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    a8bffff2-ba60-483a-bd7e-041edd1932e3
  56. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.4r6.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 135
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    7ff444e5-2eea-4223-85e1-b2ea6d0543e7
  57. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2rx:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 106
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    c766cbf4-502c-4522-845c-a5436dd1960d
  58. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r1.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 107
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    94170224-c78b-458a-b63e-53e303b0dce3
  59. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r6.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 117
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    da199898-3820-4b6c-adf6-9ea0e8238200
  60. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r4.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 112
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    545f18ab-635e-47c0-acfe-8b2a849253ff
  61. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r10.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 104
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    17bd737e-f387-4239-b3c6-e4b71eb13995
  62. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r1.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 92
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    6a42efc8-c5ff-4397-87cf-263813faa5d7
  63. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.1r4.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 78
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    09ff5e94-07f5-416c-976f-4ff22141a145
  64. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.2r11.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 105
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    cfc6d632-9b03-4cff-85d8-b4127257a47e
  65. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3r5.2:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 116
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    7d02a7df-69ce-426b-8153-3ba404b4ac64
  66. cpe:2.3:a:pulsesecure:pulse_policy_secure:5.3rx:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 126
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    1e78343d-6f53-44c0-8c45-694e6d03db95

Affected-product evidence

Accepted scope and product mapping

0 canonical links · 0 source-reported links

Applicability remains source-scoped; safety and exposure remain unassessed.

Assessments

CVSS by origin

7.2
NVDCVSS 3.1 · role Primary · priority eligiblevalid_matchCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
6.5
NVDCVSS 2.0 · role Primary · priority eligiblevalid_matchAV:N/AC:L/Au:S/C:P/I:P/A:P
8.0
cve@mitre.orgCVSS 3.0 · role Secondary · priority eligiblevalid_matchCVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
8.0
mitreCVSS 3.0 · role unknown · display onlyDirect record assessment retained outside normalized eligibilityCVSS:3.0/AC:H/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N

Evidence boundaries

  • KEV membership is authoritative for the catalog, not proof of exposure in any environment.
  • EPSS is a dated model probability and not an individual-environment prediction.
  • Affected or fixed status applies only to the exact cited product and version scope; remaining scope stays source-scoped.
  • NVD-carried upstream facts remain derivative; independent corroboration requires a separately authored source.
  • Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
  • NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
  • Affected-product evidence remains source-scoped; canonical linkage is required before applicability scoring.
  • Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.
  • OSV aggregation and OSV-converted NVD material are not independent corroboration.
  • Red Hat facts are vendor assertions for the exact supplied products.
  • Nonmembership and not-yet-observed states are not proof of safety.