Security services, software licences and managed support from one accountable partner.

← All vulnerabilities

Not yet scored Actively exploited

CVE-2020-8260

Ivanti Pulse Connect Secure Code Execution Vulnerability

Description

Pulse Connect Secure contains an unspecified vulnerability that allows an authenticated attacker to perform code execution using uncontrolled gzip extraction.

Recommended action

Apply updates per vendor instructions.

CISA remediation due date for U.S. federal agencies: 3 May 2022.

Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.