CVE-2017-11194: Pulse Connect Secure 8.3R1 has Reflected XSS in adminservercacertdetails.cgi.

Security readout for executives and security teams

This CVE describes reflected cross-site scripting in the Pulse Connect Secure 8.3R1 admin panel. A crafted certid value can be reflected without proper sanitization. Business risk is mainly compromise of an administrator browser session or abuse of admin-panel functions if an administrator is tricked into interacting with malicious content. Exposure appears limited to Pulse Connect Secure 8.3R1 deployments, especially where the administrative interface is reachable by users who could be targeted. The CVE metadata does not list CPEs or broader affected versions. Treat this as a targeted administrative-interface risk, not a confirmed widespread exploit. Prioritize if Pulse Connect Secure 8.3R1 is still deployed or admin access is exposed beyond a tightly controlled management network. Mitigation focus: Check vendor guidance for fixed Pulse Connect Secure releases or supported mitigations.; Restrict administrative interface access to trusted networks and authorized administrators.; Avoid clicking untrusted links while authenticated to the admin panel..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.