CVE-2019-11507: Ivanti Connect Secure

Medium severity, CVSS 6.1. EPSS: 4.1% chance of exploitation in the next 30 days.

In Pulse Secure Pulse Connect Secure (PCS) 8.3.x before 8.3R7.1 and 9.0.x before 9.0R3, an XSS issue has been found on the Application Launcher page.

Affected products

• Ivanti Connect Secure: version 8.3 only; version 9.0 only

Published 2019-05-08. Last modified 2026-06-17.