CVE-2020-8204: XSS
Published Jul 30, 2020
·Updated
A cross site scripting (XSS) vulnerability exists in Pulse Connect Secure <9.1R5 on the PSAL Page.
Affected Software
46 affected components
PulseSecure Pulse Connect Secure<=9.0
PulseSecure Pulse Connect Secure=9.1
PulseSecure Pulse Connect Secure=9.1-r1
PulseSecure Pulse Connect Secure=9.1-r2
PulseSecure Pulse Connect Secure=9.1-r3
PulseSecure Pulse Connect Secure=9.1-r4
PulseSecure Pulse Connect Secure=9.1-r4.1
PulseSecure Pulse Connect Secure=9.1-r4.2
PulseSecure Pulse Connect Secure=9.1-r4.3
PulseSecure Pulse Connect Secure=9.1-r5
PulseSecure Pulse Connect Secure=9.1-r6
PulseSecure Pulse Connect Secure=9.1-r7
PulseSecure Pulse Policy Secure<=9.0
PulseSecure Pulse Policy Secure=9.1
PulseSecure Pulse Policy Secure=9.1-r1
PulseSecure Pulse Policy Secure=9.1-r2
PulseSecure Pulse Policy Secure=9.1-r3
PulseSecure Pulse Policy Secure=9.1-r3.1
PulseSecure Pulse Policy Secure=9.1-r4
PulseSecure Pulse Policy Secure=9.1-r4.1
PulseSecure Pulse Policy Secure=9.1-r4.2
PulseSecure Pulse Policy Secure=9.1-r5
PulseSecure Pulse Policy Secure=9.1-r6
PulseSecure Pulse Policy Secure=9.1-r7
Ivanti Connect Secure=9.1
Ivanti Connect Secure=9.1-r1
Ivanti Connect Secure=9.1-r2
Ivanti Connect Secure=9.1-r3
Ivanti Connect Secure=9.1-r4
Ivanti Connect Secure=9.1-r4.1
Ivanti Connect Secure=9.1-r4.2
Ivanti Connect Secure=9.1-r4.3
Ivanti Connect Secure=9.1-r5
Ivanti Connect Secure=9.1-r6
Ivanti Connect Secure=9.1-r7
Ivanti Policy Secure=9.1
Ivanti Policy Secure=9.1-r1
Ivanti Policy Secure=9.1-r2
Ivanti Policy Secure=9.1-r3
Ivanti Policy Secure=9.1-r3.1
Ivanti Policy Secure=9.1-r4
Ivanti Policy Secure=9.1-r4.1
Ivanti Policy Secure=9.1-r4.2
Ivanti Policy Secure=9.1-r5
Ivanti Policy Secure=9.1-r6
Ivanti Policy Secure=9.1-r7
Event History
Jul 30, 2020
CVE Published
via MITRE·12:53 PM
Data Sourced
via MITRE·12:53 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2020-8204?
CVE-2020-8204 is a cross site scripting (XSS) vulnerability in Pulse Connect Secure <9.1R5 on the PSAL Page.
2
How severe is CVE-2020-8204?
CVE-2020-8204 has a severity score of 6.1, which is considered medium.
3
Which software versions are affected by CVE-2020-8204?
Pulse Connect Secure versions up to and including 9.1R4.3 are affected by CVE-2020-8204.
4
How can I fix CVE-2020-8204?
To fix CVE-2020-8204, upgrade Pulse Connect Secure to version 9.1R5 or newer.
5
Where can I find more information about CVE-2020-8204?
More information about CVE-2020-8204 can be found at the following link: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516