Vulnerability Database

318,003

Total vulnerabilities in the database

CVE-2019-11543

XSS exists in the admin web console in Pulse Secure Pulse Connect Secure (PCS) 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, and 5.2RX before 5.2R12.1.

  • Published: Apr 26, 2019
  • Updated: Nov 9, 2025
  • CVE: CVE-2019-11543
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.1
  • AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
pulsesecure / pulse_policy_secure 5.2r7.0 5.2r7.0.x
pulsesecure / pulse_connect_secure 8.1r1.0 8.1r1.0.x
pulsesecure / pulse_policy_secure 5.2r2.0 5.2r2.0.x
pulsesecure / pulse_policy_secure 5.2r7.1 5.2r7.1.x
pulsesecure / pulse_policy_secure 5.2r4.0 5.2r4.0.x
pulsesecure / pulse_policy_secure 5.2r3.2 5.2r3.2.x
pulsesecure / pulse_policy_secure 5.2r1.0 5.2r1.0.x
pulsesecure / pulse_policy_secure 5.2r5.0 5.2r5.0.x
pulsesecure / pulse_policy_secure 5.2r6.0 5.2r6.0.x
pulsesecure / pulse_policy_secure 5.2r8.0 5.2r8.0.x
pulsesecure / pulse_policy_secure 5.2r3.0 5.2r3.0.x
pulsesecure / pulse_policy_secure 5.4r1 5.4r1.x
pulsesecure / pulse_policy_secure 5.4r2 5.4r2.x
pulsesecure / pulse_policy_secure 5.4r2.1 5.4r2.1.x
pulsesecure / pulse_policy_secure 5.4r3 5.4r3.x
pulsesecure / pulse_policy_secure 5.4rx 5.4rx.x
pulsesecure / pulse_policy_secure 5.2r9.0 5.2r9.0.x
pulsesecure / pulse_policy_secure 5.2r9.1 5.2r9.1.x
pulsesecure / pulse_policy_secure 5.2rx 5.2rx.x
pulsesecure / pulse_connect_secure 8.3rx 8.3rx.x
pulsesecure / pulse_connect_secure 8.1rx 8.1rx.x
pulsesecure / pulse_policy_secure 5.2r10.0 5.2r10.0.x
pulsesecure / pulse_policy_secure 5.2r11.0 5.2r11.0.x
pulsesecure / pulse_policy_secure 5.4r4 5.4r4.x
pulsesecure / pulse_policy_secure 5.4r5 5.4r5.x
pulsesecure / pulse_policy_secure 5.4r5.2 5.4r5.2.x
pulsesecure / pulse_policy_secure 5.4r6 5.4r6.x
pulsesecure / pulse_policy_secure 5.4r6.1 5.4r6.1.x
pulsesecure / pulse_policy_secure 5.4r7 5.4r7.x
pulsesecure / pulse_policy_secure 9.0r1 9.0r1.x
pulsesecure / pulse_policy_secure 9.0r2 9.0r2.x
pulsesecure / pulse_policy_secure 9.0r2.1 9.0r2.1.x
pulsesecure / pulse_policy_secure 9.0r3 9.0r3.x
pulsesecure / pulse_policy_secure 9.0r3.1 9.0r3.1.x
pulsesecure / pulse_policy_secure 9.0rx 9.0rx.x
pulsesecure / pulse_connect_secure 9.0r1 9.0r1.x
pulsesecure / pulse_connect_secure 9.0r2 9.0r2.x
pulsesecure / pulse_connect_secure 9.0r2.1 9.0r2.1.x
pulsesecure / pulse_connect_secure 9.0r3 9.0r3.x
pulsesecure / pulse_connect_secure 9.0r3.1 9.0r3.1.x
pulsesecure / pulse_connect_secure 9.0r3.2 9.0r3.2.x
pulsesecure / pulse_connect_secure 9.0rx 9.0rx.x
ivanti / connect_secure 8.3 8.3.x
ivanti / connect_secure 8.1 8.1.x