{"metadata": {"vulnerability": "CVE-2019-11539", "count": 54, "kinds": {"milestone": 5, "sighting": 23, "kev": 11, "other": 15}, "linked_omitted": 0}, "data": [{"timestamp": "2019-04-25T00:00:00Z", "date_only": false, "value": "2019-04-25T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2019-11539", "field": "cveMetadata.dateReserved"}, {"timestamp": "2019-04-26T01:39:36Z", "date_only": false, "value": "2019-04-26T01:39:36.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-11539", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2019-04-26T02:29:00Z", "date_only": false, "value": "2019-04-26T02:29:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MCHX-P635-VPQ8", "record": "GHSA-MCHX-P635-VPQ8", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2019-04-26T02:29:00.300Z", "date_only": false, "value": "2019-04-26T02:29:00.300", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-11539", "record": "FKIE_CVE-2019-11539", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2019-04-26T02:29:00.300Z", "date_only": false, "value": "2019-04-26T02:29:00.300", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2019-11539", "record": "GSD-2019-11539", "field": "namespaces.nvd.nist.gov.cve.published", "linked_record": true}, {"timestamp": "2019-09-05T11:14:28Z", "date_only": false, "value": "2019-09-05T11:14:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ExcreamOnSecurity/263", "record": "CVE-2019-11539", "field": "creation_timestamp", "uuid": "e69fc441-4200-4788-83ba-e280eda81663", "content": "CVE-2019-11539\n\nIn Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.\n\nhttps://github.com/0xDezzy/CVE-2019-11539\n#exploit #rce", "url": "https://t.me/ExcreamOnSecurity/263", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2019-11-12T09:06:45Z", "date_only": false, "value": "2019-11-12T09:06:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/pulse_secure_cmd_exec.rb", "record": "CVE-2019-11539", "field": "creation_timestamp", "uuid": "c3f53b2a-1447-484c-a59a-19a183064c8f", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/pulse_secure_cmd_exec.rb"}, {"timestamp": "2019-11-20T00:00:00Z", "date_only": false, "value": "2019-11-20T00:00:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.exploit-db.com/exploits/47700", "record": "CVE-2019-11539", "field": "creation_timestamp", "uuid": "4c9242d3-256a-4106-b219-61daab2825c9", "url": "https://www.exploit-db.com/exploits/47700", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2020-09-16T07:07:41Z", "date_only": false, "value": "2020-09-16T07:07:41.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/bda440c6-c948-4cfd-b98a-983123adf45b", "record": "CVE-2019-11539", "field": "creation_timestamp", "uuid": "75631327-4238-4eed-81bb-18eb07d1b79a"}, {"timestamp": "2021-04-06T15:06:16Z", "date_only": false, "value": "2021-04-06T15:06:16.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2019-11539", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-10-25T22:30:42Z", "date_only": false, "value": "2021-10-25T22:30:42.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/63ddead6-4b82-414c-ad8e-c516b950b446", "record": "CVE-2019-11539", "field": "creation_timestamp", "uuid": "ef96c728-9bff-4ea3-8c77-50744abad272"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2019-11539", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "3c6d62fb-a6f3-4d25-8a74-c13581eabbf5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2019-11539", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "e24b46ed-9305-4d19-a788-d99d893f6fb7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2019-11539", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2019-11539", "record": "GSD-2019-11539", "field": "namespaces.cisa.gov.dateAdded", "linked_record": true}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2019-11539", "field": "evidence.0.details.added_date", "uuid": "e24b46ed-9305-4d19-a788-d99d893f6fb7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2019-11539", "field": "evidence.0.details.date_added", "uuid": "3c6d62fb-a6f3-4d25-8a74-c13581eabbf5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2019-11539", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "3c6d62fb-a6f3-4d25-8a74-c13581eabbf5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2019-11539", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "e24b46ed-9305-4d19-a788-d99d893f6fb7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2019-11539", "field": "status.status_updated_at", "uuid": "3c6d62fb-a6f3-4d25-8a74-c13581eabbf5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2019-11539", "field": "status.status_updated_at", "uuid": "e24b46ed-9305-4d19-a788-d99d893f6fb7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2019-11539", "field": "containers.adp.1.timeline.0.time", "text": "CVE-2019-11539 added to CISA KEV"}, {"timestamp": "2021-11-08T08:58:19Z", "date_only": false, "value": "2021-11-08T08:58:19.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "record": "CVE-2019-11539", "field": "creation_timestamp", "uuid": "a243837e-59cb-4fe5-912c-aa8cc61b8ce8"}, {"timestamp": "2021-11-20T09:53:52Z", "date_only": false, "value": "2021-11-20T09:53:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2019-11539", "field": "creation_timestamp", "uuid": "6ec0fcb2-7240-49ba-ad29-ecd530d299ce"}, {"timestamp": "2022-05-03T00:00:00Z", "date_only": true, "value": "2022-05-03", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2019-11539", "field": "evidence.0.details.due_date", "uuid": "3c6d62fb-a6f3-4d25-8a74-c13581eabbf5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-03T00:00:00Z", "date_only": true, "value": "2022-05-03", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2019-11539", "record": "GSD-2019-11539", "field": "namespaces.cisa.gov.dueDate", "linked_record": true}, {"timestamp": "2022-05-24T16:44:44Z", "date_only": false, "value": "2022-05-24T16:44:44Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MCHX-P635-VPQ8", "record": "GHSA-MCHX-P635-VPQ8", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-22T01:55:47Z", "date_only": false, "value": "2023-04-22T01:55:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/critical_bug/596", "record": "CVE-2019-11539", "field": "creation_timestamp", "uuid": "aaf38ddd-6510-4c21-a7b1-57aedabeac17", "content": "https://hackerone.com/reports/680480\n\n\u042d\u0442\u043e\u0442 \u0440\u0435\u043f\u043e\u0440\u0442 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Pulse Secure SSL VPN, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0412\u041c\u0424 \u0421\u0428\u0410. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2019-11510 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0444\u0430\u0439\u043b, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0441\u043a\u0438\u0435 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0435\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 Pulse VPN. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2019-11539, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432 \u0441\u0435\u0442\u0438 \u0438 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0446\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e. \u0412 \u0440\u0435\u043f\u043e\u0440\u0442\u0435 \u0443\u043a\u0430\u0437\u0430\u043d\u044b \u0448\u0430\u0433\u0438, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0434\u043b\u044f \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Pulse Secure \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \u0422\u0430\u043a\u0436\u0435 \u0432 \u0440\u0435\u043f\u043e\u0440\u0442\u0435 \u0443\u043a\u0430\u0437\u0430\u043d\u044b \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u043f\u0440\u0435\u0437\u0435\u043d\u0442\u0430\u0446\u0438\u044e Blackhat, \u043a\u043e\u0434 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u0432\u0438\u0434\u0435\u043e \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u0440\u0430\u0431\u043e\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0438 \u043f\u0440\u0438\u043c\u0435\u0440 \u043e\u0442\u0447\u0435\u0442\u0430 \u043e \u043d\u0430\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0440\u0443\u0433\u043e\u0439 \u0441\u0435\u0442\u0438.", "url": "https://t.me/critical_bug/596", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-24T23:55:29Z", "date_only": false, "value": "2023-04-24T23:55:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/critical_bug/665", "record": "CVE-2019-11539", "field": "creation_timestamp", "uuid": "37ba18bf-7794-4404-ae7d-de83663492c6", "content": "https://hackerone.com/reports/695005\n\n\u042d\u0442\u043e\u0442 \u0440\u0435\u043f\u043e\u0440\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Pulse Secure SSL VPN, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043d\u0430 Defcon/BlackHat \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 \u0432 2019 \u0433\u043e\u0434\u0443. \u041a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e, \u0437\u0434\u0435\u0441\u044c \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442\u0441\u044f CVE-2019-11510, CVE-2019-11542, CVE-2019-11539, CVE-2019-11538, CVE-2019-11508, CVE-2019-11540, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u043c\u0443 \u0447\u0442\u0435\u043d\u0438\u044e/\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0443 \u0441\u0435\u0441\u0441\u0438\u0439 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430. \u0420\u0435\u043f\u043e\u0440\u0442\u0435\u0440 \u0442\u0430\u043a\u0436\u0435 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0435 `https://\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588`, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e curl-\u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430 `/etc/passwd`. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0440\u0435\u043f\u043e\u0440\u0442\u0435\u0440 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0432\u0440\u0435\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043d\u0430\u043d\u0435\u0441\u0435\u043d \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a VPN.", "url": "https://t.me/critical_bug/665", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-12-04T20:10:27Z", "date_only": false, "value": "2023-12-04T20:10:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1293", "record": "CVE-2019-11539", "field": "creation_timestamp", "uuid": "ee96e656-175f-4559-8d8b-f18bd0fa9a72", "content": "#ExploitObserverAlert\n\nCVE-2019-11539\n\nDESCRIPTION: Exploit Observer has 19 entries related to CVE-2019-11539. In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.\n\nFIRST-EPSS: 0.971880000\nNVD-IS: 5.9\nNVD-ES: 1.2", "url": "https://t.me/arpsyndicate/1293"}, {"timestamp": "2023-12-13T01:24:02.178Z", "date_only": false, "value": "2023-12-13T01:24:02.178406Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2019-11539", "record": "GSD-2019-11539", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-02-27T21:04:17.560Z", "date_only": false, "value": "2024-02-27T21:04:17.560", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2019-11539", "record": "GSD-2019-11539", "field": "namespaces.nvd.nist.gov.cve.lastModified", "linked_record": true}, {"timestamp": "2024-08-04T22:55:40.818Z", "date_only": false, "value": "2024-08-04T22:55:40.818Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2019-11539", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:22:09.545Z", "date_only": false, "value": "2024-12-24T20:22:09.545763Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2970947", "record": "CVE-2019-11539", "field": "creation_timestamp", "uuid": "656d1b07-b1d6-483e-b71a-2ddf08d6362e", "url": "https://feedsin.space/feed/CISAKevBot/items/2970947"}, {"timestamp": "2025-02-03T15:40:52.619Z", "date_only": false, "value": "2025-02-03T15:40:52.619006Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2019-11539", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-03T15:40:52.619Z", "date_only": false, "value": "2025-02-03T15:40:52.619006Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-11539", "record": "FKIE_CVE-2019-11539", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-02-06T02:39:18Z", "date_only": false, "value": "2025-02-06T02:39:18.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Tjun105jbWZEMxnwuPtiD-BBONeDfY0azSIoyvKhpugs_FOP", "record": "CVE-2019-11539", "field": "creation_timestamp", "uuid": "330165f6-12a8-49b6-847c-0129b9a2f8c9"}, {"timestamp": "2025-02-06T03:13:43Z", "date_only": false, "value": "2025-02-06T03:13:43.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2019-11539", "field": "creation_timestamp", "uuid": "8e864bac-2988-4fa2-a266-d1b68aa8af58"}, {"timestamp": "2025-02-23T02:09:42Z", "date_only": false, "value": "2025-02-23T02:09:42.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2019-11539", "field": "creation_timestamp", "uuid": "407f455c-6a99-4b46-9208-0ccbc11a9e13"}, {"timestamp": "2025-02-23T04:10:11Z", "date_only": false, "value": "2025-02-23T04:10:11.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2019-11539", "field": "creation_timestamp", "uuid": "00c45e64-2b22-42b1-a7a7-11042134b4dd"}, {"timestamp": "2025-10-21T23:45:38.985Z", "date_only": false, "value": "2025-10-21T23:45:38.985Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2019-11539", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:45:38.985Z", "date_only": false, "value": "2025-10-21T23:45:38.985Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2019-11539", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:31:39Z", "date_only": false, "value": "2025-10-22T00:31:39Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MCHX-P635-VPQ8", "record": "GHSA-MCHX-P635-VPQ8", "field": "modified", "linked_record": true}, {"timestamp": "2026-02-02T12:29:00.751Z", "date_only": false, "value": "2026-02-02T12:29:00.751625Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3c6d62fb-a6f3-4d25-8a74-c13581eabbf5", "record": "CVE-2019-11539", "field": "creation_timestamp", "uuid": "0f4be394-ffc4-4b1a-a319-cee3f8b698b6", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3c6d62fb-a6f3-4d25-8a74-c13581eabbf5", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T02:13:07.580Z", "date_only": false, "value": "2026-06-17T02:13:07.580", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-11539", "record": "FKIE_CVE-2019-11539", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:48:03.018Z", "date_only": false, "value": "2026-06-19T12:48:03.018823Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e9c63a3b-2380-447e-9449-602d46f86974", "record": "CVE-2019-11539", "field": "creation_timestamp", "uuid": "b4d9801c-0a56-4f6f-b20d-a072f1708817", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e9c63a3b-2380-447e-9449-602d46f86974", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2019-11539", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "e24b46ed-9305-4d19-a788-d99d893f6fb7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:04:31.194Z", "date_only": false, "value": "2026-06-23T14:04:31.194187Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e24b46ed-9305-4d19-a788-d99d893f6fb7", "record": "CVE-2019-11539", "field": "creation_timestamp", "uuid": "38fafd87-807b-46df-a60d-0ab5a5612336", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e24b46ed-9305-4d19-a788-d99d893f6fb7", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-01T17:01:10.030Z", "date_only": false, "value": "2026-09-01T17:01:10.030405Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/1754", "record": "CVE-2019-11539", "field": "creation_timestamp", "uuid": "36a619dd-cae2-4f77-92c7-f8e6b815a116", "content": "With everyone working from home, VPN security is now paramount\n\n\u2022 How many concurrent users can login at the same time?\n \u2022 Will the VPN corporate policy be relaxed to accommodate the maximum of employees?\n \u2022 Who gets priority access if the appliance or service cannot support everyone?\n \u2022 How much bandwidth a typical user uses?\n \u2022 Do you split access time between users (i.e. each gets 2 hours)?\n \u2022 Number of VPN licenses or MFA tokens available?\n \u2022 Are users allowed to use the personal computer?\n \u2022 If personal computers are allowed: (1) What is their security posture (patches, AV update, etc.)? (2) Can they be trusted? (3) What files or shares are employees allowed to access?\n\n\u062d\u062a\u0645\u0627 \u0648\u0635\u0644\u0647 \u0647\u0627\u064a \u0645\u0631\u062a\u0628\u0637 \u0628\u0647 \u062a\u062c\u0647\u064a\u0632\u0627\u062a \u0632\u064a\u0631 \u0627\u06af\u0631 \u062f\u0631 \u0627\u064a\u0646 \u0627\u0633\u0643\u0648\u067e \u0647\u0633\u062a\u0646\u062f\u060c \u062d\u062a\u0645\u0627 \u0628\u0644\u0627\u062f\u0631\u0646\u06af \u0648\u0635\u0644\u0647 \u0634\u0648\u0646\u062f.\nPalo Alto Network Security Advisory PAN-SA-2019-0020, in relation to CVE-2019-1579;\n\u2022 FortiGuard Security Advisories FG-IR-18-389, in relation to CVE-2018-13382; FG-IR-18-388 in relation to CVE-2018-13383; FG-IR-18-384, in relation to CVE-2018-13379;\n\u2022 Pulse Secure Security Advisory SA44101, in relation to CVE-2019-11510, CVE-2019-11508, CVE-2019-11540, CVE-2019-11543, CVE-2019-11541, CVE-2019-11542, CVE-2019-11539, CVE-2019-11538, CVE-2019-11509, https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11507CVE-2019-11507.\n\u2022 Citrix Security Advisory CTX267027, in relation to CVE-2019-19781.\n\nhttps://www.zdnet.com/article/covid-19-with-everyone-working-from-home-vpn-security-has-now-become-paramount/", "url": "https://t.me/cissp/1754"}, {"timestamp": "2026-09-01T20:01:25.803Z", "date_only": false, "value": "2026-09-01T20:01:25.803326Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/66459", "record": "CVE-2019-11539", "field": "creation_timestamp", "uuid": "028bded4-adf8-442a-a6b4-840ac254882d", "content": "The ExploitContinue reading on Medium \u00bb (https://deb0con.medium.com/hack-the-pentagon-command-injection-via-cve-2019-11510-and-cve-2019-11539-3d80038c613c?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/66459"}, {"timestamp": "2026-09-01T20:01:25.983Z", "date_only": false, "value": "2026-09-01T20:01:25.983351Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/66457", "record": "CVE-2019-11539", "field": "creation_timestamp", "uuid": "0ce026a3-95f6-4846-96e5-1fb0c301e782", "content": "Hack The Pentagon\u200a\u2014\u200aCommand Injection (via CVE-2019\u201311510 and CVE-2019\u201311539)\nhttps://deb0con.medium.com/hack-the-pentagon-command-injection-via-cve-2019-11510-and-cve-2019-11539-3d80038c613c?source=rss------bug_bounty-5\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/66457"}, {"timestamp": "2026-09-05T11:00:03.864Z", "date_only": false, "value": "2026-09-05T11:00:03.864161Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/66457", "record": "CVE-2019-11539", "field": "creation_timestamp", "uuid": "c17959cd-caa2-4e14-9590-d3d10361a988", "content": "Hack The Pentagon\u200a\u2014\u200aCommand Injection (via CVE-2019\u201311510 and CVE-2019\u201311539)\nhttps://deb0con.medium.com/hack-the-pentagon-command-injection-via-cve-2019-11510-and-cve-2019-11539-3d80038c613c?source=rss------bug_bounty-5\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/66457", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-05T11:00:04.097Z", "date_only": false, "value": "2026-09-05T11:00:04.097515Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/66459", "record": "CVE-2019-11539", "field": "creation_timestamp", "uuid": "98b33b5f-c09d-404a-baf2-8a8ece8e2525", "content": "The ExploitContinue reading on Medium \u00bb (https://deb0con.medium.com/hack-the-pentagon-command-injection-via-cve-2019-11510-and-cve-2019-11539-3d80038c613c?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/66459", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-04T13:31:51Z", "date_only": false, "value": "2026-11-04T13:31:51+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2019-11539", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "3c6d62fb-a6f3-4d25-8a74-c13581eabbf5", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-14T22:48:30.579Z", "anchors": {"origin": {"timestamp": "2019-04-26T01:39:36Z", "date_only": false, "value": "2019-04-26T01:39:36.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-11539", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2019-04-26T01:39:36Z", "date_only": false, "value": "2019-04-26T01:39:36.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-11539", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2019-09-05T11:14:28Z", "date_only": false, "value": "2019-09-05T11:14:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ExcreamOnSecurity/263", "record": "CVE-2019-11539", "field": "creation_timestamp", "uuid": "e69fc441-4200-4788-83ba-e280eda81663", "content": "CVE-2019-11539\n\nIn Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.\n\nhttps://github.com/0xDezzy/CVE-2019-11539\n#exploit #rce", "url": "https://t.me/ExcreamOnSecurity/263", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2019-11539", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "3c6d62fb-a6f3-4d25-8a74-c13581eabbf5", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 79654824.0, "hours": 22126.34, "days": 921.9308333333333, "min_seconds": 79654824.0, "max_seconds": 79741224.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": true, "end_before_start": false, "start": {"timestamp": "2019-04-26T01:39:36Z", "date_only": false, "value": "2019-04-26T01:39:36.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-11539", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2019-11539", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "3c6d62fb-a6f3-4d25-8a74-c13581eabbf5", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 79654824.0, "hours": 22126.34, "days": 921.9308333333333, "min_seconds": 79654824.0, "max_seconds": 79741224.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": true, "end_before_start": false, "start": {"timestamp": "2019-04-26T01:39:36Z", "date_only": false, "value": "2019-04-26T01:39:36.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-11539", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2019-11539", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "3c6d62fb-a6f3-4d25-8a74-c13581eabbf5", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 11439292.0, "hours": 3177.581111111111, "days": 132.39921296296296, "min_seconds": 11439292.0, "max_seconds": 11439292.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-04-26T01:39:36Z", "date_only": false, "value": "2019-04-26T01:39:36.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-11539", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2019-09-05T11:14:28Z", "date_only": false, "value": "2019-09-05T11:14:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ExcreamOnSecurity/263", "record": "CVE-2019-11539", "field": "creation_timestamp", "uuid": "e69fc441-4200-4788-83ba-e280eda81663", "content": "CVE-2019-11539\n\nIn Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.\n\nhttps://github.com/0xDezzy/CVE-2019-11539\n#exploit #rce", "url": "https://t.me/ExcreamOnSecurity/263", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 238453734.579579, "hours": 66237.1484943275, "days": 2759.8811872636456, "min_seconds": 238453734.579579, "max_seconds": 238453734.579579, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-04-26T01:39:36Z", "date_only": false, "value": "2019-04-26T01:39:36.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-11539", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-14T22:48:30.579Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 158798910.579579, "hours": 44110.808494327495, "days": 1837.9503539303125, "min_seconds": 158712510.579579, "max_seconds": 158798910.579579, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": true, "end_before_start": false, "start": {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2019-11539", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "3c6d62fb-a6f3-4d25-8a74-c13581eabbf5", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-14T22:48:30.579Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 227014442.579579, "hours": 63059.56738321639, "days": 2627.481974300683, "min_seconds": 227014442.579579, "max_seconds": 227014442.579579, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-09-05T11:14:28Z", "date_only": false, "value": "2019-09-05T11:14:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ExcreamOnSecurity/263", "record": "CVE-2019-11539", "field": "creation_timestamp", "uuid": "e69fc441-4200-4788-83ba-e280eda81663", "content": "CVE-2019-11539\n\nIn Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands.\n\nhttps://github.com/0xDezzy/CVE-2019-11539\n#exploit #rce", "url": "https://t.me/ExcreamOnSecurity/263", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-14T22:48:30.579Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}