Juniper Pulse Connect Secure vulnerabilities

3 CVEs affecting Juniper Pulse Connect Secure, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-7323, published 2015-10-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-7322, published 2015-10-05. Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days. The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 provides different messages for attempts…
CVE-2015-5369, published 2015-08-11. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. Pulse Connect Secure (aka PCS and formerly Juniper PCS) PSC6000, PCS6500, and MAG PSC360 8.1 before 8.1r5, 8.0 before 8.0r13, 7.4 before 7.4r13.5, and 7.1 before 7.1r22.2 and PPS 5.1 before 5.1R5 and…
CVE-2015-7323, published 2015-10-05. Low severity, CVSS 3.5. EPSS: 1.7% chance of exploitation in the next 30 days. The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 allows remote authenticated users to…