Pulse Secure Desktop
Vendor:
First CVE: Aug 2, 2016 · Active for 9 years
3
Total CVEs
More Total CVEs than 68% of tracked products
1.0
Avg CVEs / Year
Bottom 1%
6.0
Avg CVSS
Higher Avg CVSS than 24% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Pulse Secure Desktop over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 2, 2016
9 years ago
Most Recent CVE
Oct 27, 2020
2,100 days ago
CVE Severity & Scoring
Pulse Secure Desktop3 CVEs
33%
33%
33%
All CVEs353,173 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local2 (66.7%)
Network0 (0.0%)
Unknown0 (0.0%)
Physical1 (33.3%)
Adjacent Network0 (0.0%)
Attack Complexity
Low3 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None3 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low2 (66.7%)
High0 (0.0%)
None1 (33.3%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (3 CVEs).
3 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2016-2408HIGH Pulse Secure Desktop before 5.2R2 and Pulse Secure Installer Service before 8.2R2 and below for Windows allow restricted users to gain privileges via unspecified vectors. | Aug 2, 2016 | 7.8 | 26 | NO | NO |
Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled. | Oct 27, 2020 | 3.3 | 25 | NO | YES |
CVE-2018-7572MEDIUM Pulse Secure Client 9.0R1 and 5.3RX before 5.3R5, when configured to authenticate VPN users during Windows Logon, can allow attackers to bypass Windows authentication and execute c | Sep 12, 2018 | 6.8 | 23 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (3 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
33.3% of CVEs· 98th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (3 CVEs).
Media Mentions
Signals from CVEs in this product scope (3 CVEs).
Top CNAs Publishing CVEs For Pulse Secure Desktop
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 9.1r3.1 | 1 | 3.3 | 1.2% | 0 | 1 |
| 9.1r3.0 | 1 | 3.3 | 1.2% | 0 | 1 |
| 9.1r2.0 | 1 | 3.3 | 1.2% | 0 | 1 |
| 9.1r1.0 | 1 | 3.3 | 1.2% | 0 | 1 |
| 9.0r4.1 | 1 | 3.3 | 1.2% | 0 | 1 |
| 9.0r4.0 | 1 | 3.3 | 1.2% | 0 | 1 |
| 9.0r3.1 | 1 | 3.3 | 1.2% | 0 | 1 |
| 9.0r3.0 | 1 | 3.3 | 1.2% | 0 | 1 |
| 9.0r2.1 | 1 | 3.3 | 1.2% | 0 | 1 |
| 9.0r2.0 | 1 | 3.3 | 1.2% | 0 | 1 |
| 9.0r1.0 | 2 | 5.0 | 0.8% | 0 | 1 |
| 5.3rx | 1 | 6.8 | 0.4% | 0 | 0 |
| 5.3r4.2 | 1 | 6.8 | 0.4% | 0 | 0 |
| 5.3r4.1 | 1 | 6.8 | 0.4% | 0 | 0 |
| 5.3r4.0 | 1 | 6.8 | 0.4% | 0 | 0 |
| 5.3r3.0 | 1 | 6.8 | 0.4% | 0 | 0 |
| 5.3r2.0 | 1 | 6.8 | 0.4% | 0 | 0 |
| 5.3r1.1 | 1 | 6.8 | 0.4% | 0 | 0 |
| 5.3r1.0 | 1 | 6.8 | 0.4% | 0 | 0 |
| 5.2r2.0 | 1 | 7.8 | 0.4% | 0 | 0 |