CVE-2020-8256 - AskarLabs CVE Database

CVE-2020-8256

Vendor N/A

Product Pulse Connect Secure

Weakness CWE-611 · XXE

Published September 29, 2020

Last update November 18, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to gain arbitrary file reading access through Pulse Collaboration via XML External Entity (XXE) vulnerability.

Key dates

02Disclosure timeline

September 29, 2020 CVE published

November 18, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-8256 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/611.html

Related vulnerabilities

04Related CVE

CVE-2025-68493 Apache Struts, Apache Struts: XXE vulnerability in outdated XWork component CVE-2021-3869 Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp CVE-2024-4690 Insecure usage for DocumentBuilderFactory and TransformerFactory in OpenText Application Automation Tools CVE-2018-0100 CVE-2019-10172