CVE-2020-8261

score

<0.1

cvss

4.3

epss

2.2%

published

2020-10-28

kev added

—

first seen

2026-10-21

Pulse Connect Secure / Pulse Policy Secure < 9.1R9 contains a vulnerability to arbitrary cookie injection caused by insufficient input validation in the cookie handling component, letting attackers manipulate cookies, exploit requires no specific privileges.