{"id":"CVE-2016-4787","aliases":["EUVD-2016-5772","GHSA-39pc-fp7x-49v9"],"status":"published","title":"Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before...","description":"Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read sensitive system authentication files in an unspecified directory via unknown vectors.","severity":{"version":"3.0","score":10,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02487,"percentile":0.84732,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2016-05-26T14:00:00Z","modified":"2026-06-17T00:48:13Z","products":[{"vendor":"ivanti","product":"connect_secure"},{"vendor":"pulsesecure","product":"pulse_connect_secure"}],"references":[{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40207","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035932","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4787"},{"url":"https://github.com/advisories/GHSA-39pc-fp7x-49v9"}],"sources":{"cve":[{"id":"CVE-2016-4787","description":"Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read sensitive system authentication files in an unspecified directory via unknown vectors.","status":"published","published":"2016-05-26T14:00:00Z","modified":"2024-08-06T00:39:26.244Z","updated_at":"2026-11-02T14:33:35.488991Z"}],"euvd":[{"id":"EUVD-2016-5772","description":"Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read sensitive system authentication files in an unspecified directory via unknown vectors.","status":"published","published":"2016-05-26T14:00:00Z","modified":"2024-08-06T00:39:26Z","updated_at":"2026-11-03T02:22:44.916959Z"}],"ghsa":[{"id":"GHSA-39pc-fp7x-49v9","title":"Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before...","description":"Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read sensitive system authentication files in an unspecified directory via unknown vectors.","status":"published","published":"2022-05-13T01:27:07Z","modified":"2023-02-01T05:07:30Z","cvss":[{"version":"3.0","score":10,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T14:50:32.865918Z"}],"nvd":[{"id":"CVE-2016-4787","description":"Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read sensitive system authentication files in an unspecified directory via unknown vectors.","status":"published","published":"2016-05-26T14:59:03.493Z","modified":"2026-06-17T00:48:13.193Z","cvss":[{"version":"3.0","score":10,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:25.366449Z"}]}}