CVE-2016-3985

6.5 mediumEPSS 1.2%

Medium (6.5) in pulsesecure pulse connect secure. EPSS 1.2% chance of exploitation in the next 30 days.

The Terminal Services Remote Desktop Protocol (RDP) client session restrictions feature in Pulse Connect Secure (aka PCS) 8.1R7 and 8.2R1 allow remote authenticated users to bypass intended access restrictions via unspecified vectors.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2016-04-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

pulsesecure:pulse_connect_secure

References

http://www.securitytracker.com/id/1035129
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40166
http://www.securitytracker.com/id/1035129
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40166

Check your stack JSON