CVE Watch—

CVE-2020-8260

Ivanti Pulse Connect Secure Code Execution Vulnerability

CVSS

—

Sem CVSS

EPSS

96.5%

p100

KEV

SIM

3 de nov. de 2021

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

96.5%EPSS · 30 dias96.5%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Ivanti / Pulse Connect Secure

Vulnerabilidade

Ivanti Pulse Connect Secure Code Execution Vulnerability

Adicionado ao KEV

3 de nov. de 2021

Corrigir até

3 de mai. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

Pulse Connect Secure contains an unspecified vulnerability that allows an authenticated attacker to perform code execution using uncontrolled gzip extraction.

Ação necessária

Apply updates per vendor instructions.

Notas

Reference CISA's ED 21-03 (https://www.cisa.gov/news-events/directives/ed-21-03-mitigate-pulse-connect-secure-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-03. https://nvd.nist.gov/vuln/detail/CVE-2020-8260

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2021-2289310.0 CRÍ

98.8%

KEV—80Ivanti Pulse Connect Secure Use-After-Free Vulnerability86d CVE-2019-11510—

100.0%

KEV—80Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability—CVE-2020-8243—

99.8%

KEV—80Ivanti Pulse Connect Secure Code Execution Vulnerability—CVE-2021-22894—

98.7%

KEV—80Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability—CVE-2021-22899—

97.8%

KEV—79Ivanti Pulse Connect Secure Command Injection Vulnerability—CVE-2021-22900—

96.6%

KEV—79Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability—