onyx

onyx --cves cve-2020-8243

CVE-2020-8243

HIGHKEVPulse Secure
score
<0.1
cvss
7.2
epss
90.8%
published
2020-09-30
kev added
2021-11-03
first seen

Pulse Connect Secure < 9.1R8.2 contains a vulnerability in the admin web interface caused by insecure template upload, letting authenticated attackers perform arbitrary code execution, exploit requires attacker to be authenticated.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2020-09-30 — PublishedP2021-11-03 — Added to CISA KEVK2026-10-21 — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 90.8%2026-09-23: epss 90.8%2026-09-24: epss 90.8%2026-09-25: epss 90.8%2026-09-26: epss 90.8%2026-09-27: epss 90.8%2026-09-28: epss 90.8%2026-09-29: epss 90.8%2026-09-30: epss 90.8%2026-10-01: epss 90.8%2026-10-02: epss 90.8%2026-10-03: epss 90.8%2026-10-04: epss 90.8%2026-10-05: epss 90.8%2026-10-06: epss 90.8%2026-10-07: epss 90.8%2026-10-08: epss 90.8%2026-10-09: epss 90.8%2026-10-10: epss 90.8%2026-10-11: epss 90.8%2026-10-12: epss 90.8%2026-10-13: epss 90.8%2026-10-14: epss 90.8%2026-10-15: epss 90.8%2026-10-16: epss 90.8%2026-10-18: epss 90.8%2026-10-19: epss 90.8%2026-10-20: epss 90.8%2026-10-21: epss 90.8%90.8%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Added to CISA KEV
  3. Tracked by Onyx

Weaknesses

CWE-94

References 7