Improper Header Sanitization in Pulse Secure Pulse Connect Secure 8.3RX before 8.3R3 (XSS Vulnerability)

CVE-2018-20808 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:P/A:N

An XSS issue has been found with rd.cgi in Pulse Secure Pulse Connect Secure 8.3RX before 8.3R3 due to improper header sanitization. This is not applicable to 8.1RX.

Learn more about our Web Application Penetration Testing UK.