onyx

onyx --cves cve-2020-15352

CVE-2020-15352

HIGHPulse Secure
score
<0.1
cvss
7.2
epss
3.2%
published
2020-10-27
kev added
—
first seen

Pulse Connect Secure (PCS) before 9.1R9 and Pulse Policy Secure (PPS) before 9.1R9 contain an XML external entity (XXE) caused by improper handling of DTDs in XML requests, letting authenticated admins conduct server-side request forgery (SSRF) attacks, exploit requires admin authentication.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2020-10-27 — PublishedP2026-10-21 — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 3.2%2026-09-23: epss 3.2%2026-09-24: epss 3.2%2026-09-25: epss 3.2%2026-09-26: epss 3.2%2026-09-27: epss 3.2%2026-09-28: epss 3.2%2026-09-29: epss 3.2%2026-09-30: epss 3.2%2026-10-01: epss 3.2%2026-10-02: epss 3.2%2026-10-03: epss 3.2%2026-10-04: epss 3.2%2026-10-05: epss 3.2%2026-10-06: epss 3.2%2026-10-07: epss 3.2%2026-10-08: epss 3.2%2026-10-09: epss 3.2%2026-10-10: epss 3.2%2026-10-11: epss 3.2%2026-10-12: epss 3.2%2026-10-13: epss 3.2%2026-10-14: epss 3.2%2026-10-15: epss 3.2%2026-10-16: epss 3.2%2026-10-18: epss 3.2%2026-10-19: epss 3.2%2026-10-20: epss 3.2%2026-10-21: epss 3.2%3.2%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

CWE-611

References 1