Servers and applications
CVE-2016-4791
The administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote administrators to enumerate files, read arbitrary files, and conduct server side request forgery (SSRF) attacks via unspecified vectors.
- Severity
- High 8.6
- Published
- 26 May 2016
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Exploit chance
- 2.2% in the next 30 daysHigher than 83% of CVEs. EPSS by FIRST, 11 Nov 2026
- Attack
- Over the network · No login needed · No user action needed
- Attacker can
- Change data
- CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Ivanti Connect SecureServers and applications · cpe:a:ivanti:connect_secure |
|