Vulnerabilities

TI-2021-11910 CVE-2021-31922 · GHSA-85qj-2cfq-3wp8

An HTTP Request Smuggling vulnerability in Pulse Secure Virtual Traffic Manager before…

LOW 35

An HTTP Request Smuggling vulnerability in Pulse Secure Virtual Traffic Manager before 21.1 could allow an attacker to smuggle an HTTP request through an HTTP/2 Header.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00973 Published 2021-05-14 No fix listed CWE-444

TI-2018-14369 CVE-2018-20307 · GHSA-4j6h-qxvh-v5mq

Pulse Secure Virtual Traffic Manager 9.9 versions prior to 9.9r2 and 10.4r1 allow a…

LOW 22

Pulse Secure Virtual Traffic Manager 9.9 versions prior to 9.9r2 and 10.4r1 allow a remote authenticated user to obtain sensitive historical activity information by leveraging incorrect permission validation.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00833 Published 2018-12-20 No fix listed CWE-200

TI-2018-14368 CVE-2018-20306 · GHSA-h98j-8jcj-m3pq

A stored cross-site scripting (XSS) vulnerability in the web administration user…

LOW 25

A stored cross-site scripting (XSS) vulnerability in the web administration user interface of Pulse Secure Virtual Traffic Manager may allow a remote authenticated attacker to inject web script or HTML via a crafted webs…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00539 Published 2018-12-20 No fix listed CWE-79

Vulnerabilities

Filters

An HTTP Request Smuggling vulnerability in Pulse Secure Virtual Traffic Manager before…

Pulse Secure Virtual Traffic Manager 9.9 versions prior to 9.9r2 and 10.4r1 allow a…

A stored cross-site scripting (XSS) vulnerability in the web administration user…