CVE:CVE-2019-11507
CNNVD:CNNVD-201904-1234
Pulse Secure Pulse Connect Secure（又名PCS，前称Juniper Junos Pulse）是美国Pulse Secure公司的一套SSL VPN解决方案。
PuPulse Secur PCS 8.3R7.1之前的8.3.x版本和9.0R3之前的9.0.x版本中的Pulse Secure Application Launcher页面存在跨站脚本漏洞，该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。
solution:Upgrade pulsesecure pulse_connect_secure to a higher version than 8.3:r1,8.3:r1.1,8.3:r2,8.3:r2.1,8.3:r3,8.3:r4,8.3:r5,8.3:r5.1,8.3:r5.2,8.3:r6,8.3:r6.1,8.3:r7,9.0:r1,9.0:r2,9.0:r2.1,and avoid the version 8.3:r1,8.3:r1.1,8.3:r2,8.3:r2.1,8.3:r3,8.3:r4,8.3:r5,8.3:r5.1,8.3:r5.2,8.3:r6,8.3:r6.1,8.3:r7,9.0:r1,9.0:r2,9.0:r2.1