What’s Vulnerable › Vulnerabilities

CVE-2016-2408

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-08-02 · updated 2026-06-17
• Weakness: CWE-264

Description

Pulse Secure Desktop before 5.2R2 and Pulse Secure Installer Service before 8.2R2 and below for Windows allow restricted users to gain privileges via unspecified vectors.

Affected products

• Pulsesecure Odyssey Access Client: through 5.6r16.0
• Pulsesecure Pulse Secure Desktop: 5.0r1.0, 5.0r2.0, 5.0r3.0, 5.0r3.1, 5.0r4.0, 5.0r4.1 (+29)
• Pulsesecure Pulse Secure Security: 8.0r1.0, 8.0r1.1, 8.0r2.0, 8.0r3.0, 8.0r3.1, 8.0r3.2 (+33)
• Pulsesecure Standalone Pulse Installer Service: 7.4r1.0, 7.4r2.0, 7.4r3.0, 7.4r4.0, 7.4r5.0, 7.4r6.0 (+56)

References

• http://www.securityfocus.com/bid/92692
• http://www.securitytracker.com/id/1036474
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40241
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40241/
• http://www.securityfocus.com/bid/92692
• http://www.securitytracker.com/id/1036474
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40241
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40241/

Get alerted when CVE-2016-2408 or the next vulnerability affects your stack