CVE-2017-14935

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-09-30 · updated 2026-06-17
Weakness: CWE-20

Description

Pulse Secure Pulse One On-Premise 2.0.1649 and below does not properly validate requests, which allows remote users to query and obtain sensitive information.

Affected products

Pulsesecure Pulse One On-Premise: 2.0.1649

References

http://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40971
http://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40971

Get alerted when CVE-2017-14935 or the next vulnerability affects your stack