CVE-2016-2408: Pulse Secure Odyssey Access Client

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Pulse Secure Desktop before 5.2R2 and Pulse Secure Installer Service before 8.2R2 and below for Windows allow restricted users to gain privileges via unspecified vectors.

Affected products

• Pulse Secure Odyssey Access Client: up to and including 5.6r16.0
• Pulse Secure Pulse Secure Desktop: version 5.0r1.0 only; version 5.0r2.0 only; version 5.0r3.0 only; version 5.0r3.1 only; version 5.0r4.0 only; version 5.0r4.1 only; …
• Pulse Secure Pulse Secure Security: version 8.0r1.0 only; version 8.0r1.1 only; version 8.0r2.0 only; version 8.0r3.0 only; version 8.0r3.1 only; version 8.0r3.2 only; …
• Pulse Secure Standalone Pulse Installer Service: version 7.4r1.0 only; version 7.4r2.0 only; version 7.4r3.0 only; version 7.4r4.0 only; version 7.4r5.0 only; version 7.4r6.0 only; …

Published 2016-08-02. Last modified 2026-06-17.