CVE-2019-11510
En bref Sévérité CRITICAL 9.9 Exploitation Exploitation connue (CISA KEV) · ajoutée le 2021-11-03 Exploitée selon l'ENISA depuis le 2021-11-03 EPSS EPSS 100.00 % · centile 100 (2026-10-27) État PUBLISHED Publiée 2019-05-08 Mise à jour 2025-10-21 Attribuée par mitre Statut NVD Analyzed Description In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnerability .
Scores Version Score Vecteur Évalué par CVSS 3.0 CRITICAL 9.9 CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N mitre CVSS 3.1 CRITICAL 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H NVD · nvd@nist.gov (Primary) CVSS 3.0 CRITICAL 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H NVD · cve@mitre.org (Secondary) CVSS 2.0 HIGH 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P NVD · nvd@nist.gov (Primary)
Faiblesses (CWE)
Références européennes
Configurations affectées (CPE NVD) cpe:2.3:a:ivanti:connect_secure:8.2:r1.0:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.2:r1.1:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.2:r10.0:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.2:r11.0:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.2:r12.0:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.2:r2.0:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.2:r3.0:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.2:r3.1:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.2:r4.0:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.2:r4.1:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.2:r5.0:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.2:r5.1:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.2:r6.0:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.2:r7.0:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.2:r7.1:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.2:r8.0:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.2:r8.1:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.2:r8.2:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.2:r9.0:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.3:r1:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.3:r2:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.3:r2.1:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.3:r3:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.3:r4:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.3:r5:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.3:r5.1:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.3:r5.2:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.3:r6:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.3:r6.1:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:8.3:r7:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:9.0:r1:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:9.0:r2:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:9.0:r2.1:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:9.0:r3:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:9.0:r3.1:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:9.0:r3.2:*:*:*:*:*:*cpe:2.3:a:ivanti:connect_secure:9.0:r3.3:*:*:*:*:*:*Produits affectés Produit Versions affected n/a
Références
Sources
