UpHeron
All vulnerabilities

Servers and applications

CVE-2018-20809

A crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R5 and Pulse Policy Secure 5.4RX before 5.4R5. This is not applicable to PCS 8.1RX.

Severity
High 7.5
Published
28 Jun 2019
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
2.7% in the next 30 daysHigher than 86% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Ivanti Connect SecureServers and applications · cpe:a:ivanti:connect_secure
  • Version 8.3-r1
  • Version 8.3-r2
  • Version 8.3-r2.1
  • Version 8.3-r3
  • Version 8.3-r4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-20809
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-20809