CVE-2020-8243

Timeline

Detection, updates, and resolution for this record.

1. Sep 30, 2020 · Catalog

   Detected

   Ivanti Pulse Connect Secure contains an unspecified vulnerability in the admin web interface that could allow an authenticated attacker to upload a custom template to perform code execution.

2. Nov 3, 2021 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. May 3, 2022 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Jun 16, 2026 · Catalog

   Updated

   Ivanti Pulse Connect Secure contains an unspecified vulnerability in the admin web interface that could allow an authenticated attacker to upload a custom template to perform code execution.

Affected

• cpe ivanti/connect secureversion unspecified
• cpe ivanti/connect secure9.1
• vendor Ivanti Pulse Connect Secureversion unspecified

Sources

• CISA KEVCVE-2020-8243

  Ivanti Pulse Connect Secure contains an unspecified vulnerability in the admin web interface that could allow an authenticated attacker to upload a custom template to perform code execution.

  cisa.gov
• CVE.orgCVE-2020-8243

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2020-8243

  30-day exploitation probability 90.8%

  first.org
• NIST NVDCVE-2020-8243

  A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to upload custom template to perform an arbitrary code execution.

  nvd.nist.gov

References

• Vendor Advisory · kb.pulsesecure.net
• CISA note · nvd.nist.gov
• US Government Resource · cisa.gov
• CISA note · cisa.gov