What’s Vulnerable › Vulnerabilities

CVE-2019-11539: Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2021-11-03
• EPSS: 98.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-04-26 · updated 2026-06-17
• Weakness: CWE-78

Description

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.

Affected products

• Ivanti Connect Secure (Pulse Secure): 8.1, 8.1-r1.0, 8.1-r1.1, 8.1-r10.0, 8.1-r11.0, 8.1-r11.1 (+61)
• Ivanti Policy Secure: 9.0-r1, 9.0-r2, 9.0-r2.1, 9.0-r3, 9.0-r3.1
• Pulsesecure Pulse Policy Secure: 5.1r1.0, 5.1r1.1, 5.1r2.0, 5.1r2.1, 5.1r3.0, 5.1r3.2 (+60)

References

• http://packetstormsecurity.com/files/154376/Pulse-Secure-8.1R15.1-8.2-8.3-9.0-SSL-VPN-Remote-Code-Execution.html
• http://packetstormsecurity.com/files/155277/Pulse-Secure-VPN-Arbitrary-Command-Execution.html
• http://packetstormsecurity.com/files/162092/Pulse-Secure-VPN-Arbitrary-Command-Execution.html
• http://www.securityfocus.com/bid/108073
• https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/
• https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010
• https://www.kb.cert.org/vuls/id/927237
• http://packetstormsecurity.com/files/154376/Pulse-Secure-8.1R15.1-8.2-8.3-9.0-SSL-VPN-Remote-Code-Execution.html
• http://packetstormsecurity.com/files/155277/Pulse-Secure-VPN-Arbitrary-Command-Execution.html
• http://packetstormsecurity.com/files/162092/Pulse-Secure-VPN-Arbitrary-Command-Execution.html

Get alerted when CVE-2019-11539 or the next vulnerability affects your stack