Skip to content
OpenAdvisories
Critical · 9.9 Known exploited · Ransomware Scanner template Public exploit CVE-2019-11510 EUVD-2019-3183GHSA-6wr2-qx99-98mg

In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attac…

Published May 8, 2019 · Updated Oct 21, 2025 · Assigned by mitre

Description

In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnerability .

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

Metasploit 1 module

GitHub 13 repositories · most starred shown

  • projectzeroindia/CVE-2019-11510 ★ 359 · Aug 21, 2019

    Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)

  • BishopFox/pwn-pulse ★ 132 · Sep 9, 2019

    Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability (CVE-2019-11510)

  • jas502n/CVE-2019-11510-1 ★ 52 · Aug 27, 2019

    SSL VPN Rce

  • imjdl/CVE-2019-11510-poc ★ 50 · Aug 22, 2019

    Pulse Secure SSL VPN pre-auth file reading

  • cisagov/check-your-pulse ★ 28 · Apr 16, 2020

    This utility can help determine if indicators of compromise (IOCs) exist in the log files of a Pulse Secure VPN Appliance for CVE-2019-11510.

  • r00tpgp/http-pulse_ssl_vpn.nse ★ 18 · Aug 27, 2019

    Nmap NSE script to detect Pulse Secure SSL VPN file disclosure CVE-2019-11510

  • aqhmal/pulsexploit ★ 9 · Dec 7, 2019

    Automated script for Pulse Secure SSL VPN exploit (CVE-2019-11510) using hosts retrieved from Shodan API. You must have a Shodan account to use this script.

  • es0/CVE-2019-11510_poc ★ 5 · Aug 26, 2019

    PoC for CVE-2019-11510 | Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN - Arbitrary File Disclosure vulnerability

  • 34zY/APT-Backpack ★ 3 · Dec 13, 2022

    cve-2019-11510, cve-2019-19781, cve-2020-5902, cve-2021-1497, cve-2021-20090, cve-2021-22006, cve-2021-22205, cve-2021-26084, cve-2021-26855, cve-2021-26857, cve-2021–26857, cve-2021–26858, cve-2021–…

  • andripwn/pulse-exploit ★ 1 · Jul 27, 2020

    Pulse Secure SSL VPN exploit (CVE-2019-11510) using hosts retrieved from Shodan API.

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References