CVE:CVE-2019-11543
CNNVD:CNNVD-201904-1240
Pulse Secure Pulse Connect Secure（又名PCS，前称Juniper Junos Pulse）和Pulse Policy Secure都是美国Pulse Secure公司的产品。Pulse Connect Secure是一套SSL VPN解决方案。Pulse Policy Secure是一套网络准入控制解决方案。
Pulse Secure PCS和Pulse Policy Secure中的admin web控制台存在跨站脚本漏洞，该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。以下产品和版本受到影响：Pulse Secure Pulse Connect Secure 9.0R3.4之前的9.0RX版本， 8.3R7.1之前的8.3RX版本，8.1R15.1之前的8.1RX版本；Pulse Policy Secure 9.0R3.2之前的9.0RX版本，5.4R7.1之前的5.4RX版本，5.2R12.1之前的5.2RX版本。
solution:Upgrade pulsesecure pulse_connect_secure to a higher version than 8.1,8.1r1.0,8.1rx,8.3,8.3rx,9.0r1,9.0r2,9.0r2.1,9.0r3,9.0r3.1,9.0r3.2,9.0rx,and avoid the version 8.1,8.1r1.0,8.1rx,8.3,8.3rx,9.0r1,9.0r2,9.0r2.1,9.0r3,9.0r3.1,9.0r3.2,9.0rx; Upgrade pulsesecure pulse_policy_secure to a higher version than 5.2r1.0,5.2r2.0,5.2r3.0,5.2r3.2,5.2r4.0,5.2r5.0,5.2r6.0,5.2r7.0,5.2r7.1,5.2r8.0,5.2r9.0,5.2r9.1,5.2r10.0,5.2r11.0,5.2rx,5.4r1,5.4r2,5.4r2.1,5.4r3,5.4r4,5.4r5,5.4r5.2,5.4r6,5.4r6.1,5.4r7,5.4rx,9.0r1,9.0r2,9.0r2.1,9.0r3,9.0r3.1,9.0rx,and avoid the version 5.2r1.0,5.2r2.0,5.2r3.0,5.2r3.2,5.2r4.0,5.2r5.0,5.2r6.0,5.2r7.0,5.2r7.1,5.2r8.0,5.2r9.0,5.2r9.1,5.2r10.0,5.2r11.0,5.2rx,5.4r1,5.4r2,5.4r2.1,5.4r3,5.4r4,5.4r5,5.4r5.2,5.4r6,5.4r6.1,5.4r7,5.4rx,9.0r1,9.0r2,9.0r2.1,9.0r3,9.0r3.1,9.0rx