CVE-2019-11543

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

XSS exists in the admin web console in Pulse Secure Pulse Connect Secure (PCS) 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, and 5.2RX before 5.2R12.1.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/108073Broken Link, Third Party Advisory, VDB Entry
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101Vendor Advisory
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101/Vendor Advisory
https://www.kb.cert.org/vuls/id/927237Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/108073Broken Link, Third Party Advisory, VDB Entry
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101Vendor Advisory
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101/Vendor Advisory
https://www.kb.cert.org/vuls/id/927237Third Party Advisory, US Government Resource

Timeline

Published: Apr 26, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-115444.3An issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9.10, and 11.10.CVE-2019-115454.3An issue was discovered in GitLab Community Edition 11.9.x before 11.9.10 and 11.10.x before 11.10.2. It allows Information Disclosure. When CVE-2019-115465.3An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. It has CVE-2019-115476.1An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. It has CVE-2019-115485.4An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9. It has Incorrect Access Control. Unprivileged members of a CVE-2019-115496.5An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9.10, and 11.10.x bef CVE-2019-11557.8A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who succ CVE-2019-115505.9Citrix SD-WAN 10.2.x before 10.2.1 and NetScaler SD-WAN 10.0.x before 10.0.7 have Improper Certificate Validation.CVE-2019-115515.5In Code42 Enterprise and Crashplan for Small Business through Client version 6.9.1, an attacker can craft a restore request to restore a fil CVE-2019-115527.0Code42 Enterprise and Crashplan for Small Business Client version 6.7 before 6.7.5, 6.8 before 6.8.8, and 6.9 before 6.9.4 allows eval injec CVE-2019-115538.8In Code42 for Enterprise through 6.8.4, an administrator without web restore permission but with the ability to manage users in an organizat CVE-2019-115545.9The Audible application through 2.34.0 for Android has Missing SSL Certificate Validation for Adobe SDKs, allowing MITM attackers to cause a