UpHeron
All vulnerabilities

Servers and applications

CVE-2019-11507

In Pulse Secure Pulse Connect Secure (PCS) 8.3.x before 8.3R7.1 and 9.0.x before 9.0R3, an XSS issue has been found on the Application Launcher page.

Severity
Medium 6.1
Published
8 May 2019
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
3.8% in the next 30 daysHigher than 90% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Ivanti Connect SecureServers and applications · cpe:a:ivanti:connect_secure
  • Version 9.0-r2.1
  • Version 9.0-r2
  • Version 9.0-r1
  • Version 8.3-r7
All 15 release lines
  • Version 8.3-r1
  • Version 8.3-r1.1
  • Version 8.3-r2
  • Version 8.3-r2.1
  • Version 8.3-r3
  • Version 8.3-r4
  • Version 8.3-r5
  • Version 8.3-r5.1
  • Version 8.3-r5.2
  • Version 8.3-r6
  • Version 8.3-r6.1
  • Version 8.3-r7
  • Version 9.0-r1
  • Version 9.0-r2
  • Version 9.0-r2.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-11507
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-11507