cvedb.io
CVE-2018-5299
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2018-01-16T22:29:00.240 · Last modified 2026-06-17T02:00:00.237

Summary

A stack-based Buffer Overflow Vulnerability exists in the web server in Pulse Secure Pulse Connect Secure (PCS) before 8.3R4 and Pulse Policy Secure (PPS) before 5.4R4, leading to memory corruption and possibly remote code execution.

Affected products

pulsesecure — pulse_connect_secure

Does this affect you?

Add your gear to cvedb and we'll alert you only when pulsesecure ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.