CVE-2020-8238 - AskarLabs CVE Database

CVE-2020-8238

Vendor Pulse Secure

Product Pulse Connect Secure/ Pulse Policy Secure

Weakness CWE-79 · XSS

Published September 29, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A vulnerability in the authenticated user web interface of Pulse Connect Secure and Pulse Policy Secure < 9.1R8.2 could allow attackers to conduct Cross-Site Scripting (XSS).

Key dates

02Disclosure timeline

September 29, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-8238 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2021-47695 Nagios XI < 5.8.0 XSS via My Tools Page CVE-2026-44831 Snipe-IT: XSS vulnerability in component notes CVE-2025-8303 XSS in EKA Software's Real Estate Script V5 (With Doping Module – Store Module – New Language System) CVE-2023-52192 WordPress Keap Official Opt-in Forms Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS) CVE-2022-2072 Name Directory < 1.25.3 - Reflected Cross-Site Scripting