← ExploitWatch
HomeExploited Vulnerabilities

CVE-2020-8218 — Actively Exploited: Pulse Connect Secure (Pulse Secure)

A code injection vulnerability exists in Pulse Connect Secure that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.

CVE IDCVE-2020-8218
VendorPulse Secure
ProductPulse Connect Secure
Vulnerability namePulse Connect Secure Code Injection Vulnerability
Date added2022-03-07
Remediation due2022-09-07
Known ransomware useUnknown
Required actionApply updates per vendor instructions.
DescriptionA code injection vulnerability exists in Pulse Connect Secure that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.
SourceCISA Known Exploited Vulnerabilities

🔍 Search all exploited vulnerabilities →