CVE-2020-8260

Ivanti Pulse Connect Secure Code Execution Vulnerability

7.2
CVSS 3.1
96.5 %
EPSS (current)
2021-11-03
KEV addition
No
Ransomware

Timeline

Publication, first public exploit and KEV addition on a day axis.

Key facts

Vendor / product: Ivanti / Pulse Connect Secure

Published: 2020-10-28 · Due (CISA): 2022-05-03

CWE: CWE-434 · EU list: no

Exploit references (metadata only)

SourceReferenceTitleDate
metasploitexploit/linux/http/pulse_secure_gzip_rceexploit/linux/http/pulse_secure_gzip_rce2020-10-26

References only — no downloads or instructions.

Sources