Security Advisory

CVE-2020-15352

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-10-27 04:10:54

Last updated 2024-08-04 13:15:20

Assigner mitre

State PUBLISHED

Description

An XML external entity (XXE) vulnerability in Pulse Connect Secure (PCS) before 9.1R9 and Pulse Policy Secure (PPS) before 9.1R9 allows remote authenticated admins to conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.

← Browse all CVEs View on cve.org ↗