CVE Watch—

CVE-2019-11510

Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability

CVSS

—

Sem CVSS

EPSS

100.0%

p100

KEV

SIM

3 de nov. de 2021

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

100.0%EPSS · 30 dias100.0%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Ivanti / Pulse Connect Secure

Vulnerabilidade

Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability

Adicionado ao KEV

3 de nov. de 2021

Corrigir até

3 de mai. de 2022

Uso conhecido em ransomware

Sim

Descrição resumida

Ivanti Pulse Connect Secure contains an arbitrary file read vulnerability that allows an unauthenticated remote attacker with network access via HTTPS to send a specially crafted URI.

Ação necessária

Apply updates per vendor instructions.

Notas

Reference CISA's ED 21-03 (https://www.cisa.gov/news-events/directives/ed-21-03-mitigate-pulse-connect-secure-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-03. https://nvd.nist.gov/vuln/detail/CVE-2019-11510

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2021-2289310.0 CRÍ

98.8%

KEV—80Ivanti Pulse Connect Secure Use-After-Free Vulnerability86d CVE-2020-8260—

99.9%

KEV—80Ivanti Pulse Connect Secure Code Execution Vulnerability—CVE-2020-8243—

99.8%

KEV—80Ivanti Pulse Connect Secure Code Execution Vulnerability—CVE-2021-22894—

98.7%

KEV—80Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability—CVE-2021-22899—

97.8%

KEV—79Ivanti Pulse Connect Secure Command Injection Vulnerability—CVE-2021-22900—

96.6%

KEV—79Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability—