CVE-2026-1711
- EPSS 0.19%
- Veröffentlicht 15.04.2026 21:32:51
- Zuletzt bearbeitet 23.04.2026 20:01:09
Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component. Requires a high privileged user with a developer role.
CVE-2026-1564
- EPSS 0.19%
- Veröffentlicht 15.04.2026 21:31:19
- Zuletzt bearbeitet 23.04.2026 20:02:20
Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a developer role.
CVE-2025-62184
- EPSS 0.26%
- Veröffentlicht 31.03.2026 17:52:07
- Zuletzt bearbeitet 03.04.2026 12:49:16
Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface component. Requires an administrative user and given extensive access rights, impact to Confidentiality is low and Integrity ...
CVE-2025-9559
- EPSS 0.37%
- Veröffentlicht 16.10.2025 15:28:18
- Zuletzt bearbeitet 30.10.2025 16:15:26
Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data.
CVE-2025-8681
- EPSS 0.18%
- Veröffentlicht 10.09.2025 16:00:15
- Zuletzt bearbeitet 29.10.2025 18:14:25
Pega Platform versions 7.1.0 to Infinity 24.2.2 are affected by a Stored XSS issue in a user interface component. Requires a high privileged user with a developer role.
CVE-2025-2161
- EPSS 0.22%
- Veröffentlicht 14.04.2025 14:19:37
- Zuletzt bearbeitet 30.10.2025 19:11:54
Pega Platform versions 7.2.1 to Infinity 24.2.1 are affected by an XSS issue with Mashup
CVE-2025-2160
- EPSS 0.22%
- Veröffentlicht 14.04.2025 14:16:34
- Zuletzt bearbeitet 30.10.2025 19:01:19
Pega Platform versions 8.4.3 to Infinity 24.2.1 are affected by an XSS issue with Mashup
CVE-2024-12211
- EPSS 0.31%
- Veröffentlicht 13.01.2025 17:15:16
- Zuletzt bearbeitet 29.10.2025 15:22:02
Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an Stored XSS issue with profile.
CVE-2023-50168
- EPSS 0.39%
- Veröffentlicht 14.03.2024 16:15:49
- Zuletzt bearbeitet 10.03.2025 15:22:26
Pega Platform from 6.x to 8.8.4 is affected by an XXE issue with PDF Generation.
CVE-2023-50167
- EPSS 0.3%
- Veröffentlicht 06.03.2024 18:15:46
- Zuletzt bearbeitet 18.02.2025 13:43:27
Pega Platform from 7.1.7 to 23.1.1 is affected by an XSS issue with editing/rendering user html content.