n/a Pulse Connect Secure

Name: n/a Pulse Connect Secure
Brand: n/a

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical11high9medium0low

updated 2026-10-28

vulnerabilities (21)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-22893US	critical10.0OT critical	47.2% (99th)	KEV	no fix	2021-04-23	≤ PCS 9.0R3 or above, PCS 9.1R1 and above
CVE-2020-8218US	high7.2OT critical	32.3% (98th)	KEV	no fix	2020-07-30	≤ Fixed in 9.1R8
CVE-2021-22894US	high8.8OT critical	41.3% (99th)	KEV	no fix	2021-05-27	≤ Fixed version 9.1R11.4
CVE-2021-22899US	high8.8OT critical	22.9% (98th)	KEV	no fix	2021-05-27	≤ Fixed in 9.1R11.4
CVE-2021-22908US	high8.8	69.4% (99th)	—	no fix	2021-05-27	≤ Fixed in 9.1R11.5
CVE-2021-22937US	high7.2	7.83% (95th)	—	no fix	2021-08-16	≤ Fixed in 9.1R12
CVE-2021-22934US	high7.2	4.67% (92nd)	—	no fix	2021-08-16	≤ Fixed in 9.1R12
CVE-2020-8256US	medium4.9	3.36% (89th)	—	no fix	2020-09-30	≤ Fixed in 9.1R8.2
CVE-2020-8206US	high8.1	2.99% (87th)	—	no fix	2020-07-30	≤ Fixed in 9.1R8
CVE-2020-8220US	medium6.5	2.46% (84th)	—	no fix	2020-07-30	≤ Fixed in 9.1R8
CVE-2020-8216US	medium4.3	2.28% (83rd)	—	no fix	2020-07-30	≤ Fixed in 9.1R8
CVE-2020-8222US	medium6.8	2.28% (83rd)	—	no fix	2020-07-30	≤ Fixed in 9.1R8
CVE-2020-8221US	medium4.9	2.28% (83rd)	—	no fix	2020-07-30	≤ Fixed in
CVE-2020-8219US	high7.2OT elevated	2.22% (83rd)	—	no fix	2020-07-30	≤ Fixed in 9.1R8
CVE-2021-22965US	high7.5	2.19% (82nd)	—	no fix	2021-11-19	≤ Fixed in 9.1R12.1
CVE-2021-22938US	high7.2	2.10% (82nd)	—	no fix	2021-08-16	≤ Fixed in 9.1R12
CVE-2021-22935US	high7.2	2.10% (82nd)	—	no fix	2021-08-16	≤ Fixed in 9.1R12
CVE-2020-8204US	medium6.1	1.81% (79th)	—	no fix	2020-07-30	≤ Fixed in 9.1R5
CVE-2021-22933US	medium6.5	1.38% (72nd)	—	no fix	2021-08-16	≤ Fixed in 9.1R12
CVE-2020-8217US	medium5.4	1.35% (71st)	—	no fix	2020-07-30	≤ Fixed in 9.1R8
CVE-2021-22936US	medium6.1	0.85% (58th)	—	no fix	2021-08-16	≤ Fixed in 9.1R12

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-287Improper Authentication2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)21 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan