Vulnerability Database

318,003

Total vulnerabilities in the database

CVE-2019-11507

In Pulse Secure Pulse Connect Secure (PCS) 8.3.x before 8.3R7.1 and 9.0.x before 9.0R3, an XSS issue has been found on the Application Launcher page.

  • Published: May 8, 2019
  • Updated: Nov 9, 2025
  • CVE: CVE-2019-11507
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.1
  • AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
ivanti / connect_secure 9.0-r1 9.0-r1.x
ivanti / connect_secure 9.0-r2 9.0-r2.x
ivanti / connect_secure 9.0-r2.1 9.0-r2.1.x
ivanti / connect_secure 8.3-r1 8.3-r1.x
ivanti / connect_secure 8.3-r2 8.3-r2.x
ivanti / connect_secure 8.3-r2.1 8.3-r2.1.x
ivanti / connect_secure 8.3-r3 8.3-r3.x
ivanti / connect_secure 8.3-r6 8.3-r6.x
ivanti / connect_secure 8.3-r6.1 8.3-r6.1.x
ivanti / connect_secure 8.3-r1.1 8.3-r1.1.x
ivanti / connect_secure 8.3-r4 8.3-r4.x
ivanti / connect_secure 8.3-r5 8.3-r5.x
ivanti / connect_secure 8.3-r5.1 8.3-r5.1.x
ivanti / connect_secure 8.3-r5.2 8.3-r5.2.x
ivanti / connect_secure 8.3-r7 8.3-r7.x