Pega Platform vulnerabilities
8 vulnerabilities
Known vulnerabilities in Pega Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2023-50166pegasystems · pega platform +1 morepegasystems pega platformPega Platform from 8.5.4 to 8.8.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter.CVSS6.1MediumEPSS0.34%RoutineCVE-2023-50165pegasystems · pega platform +1 morepegasystems pega platformPega Platform versions 8.2.1 to Infinity 23.1.0 are affected by an Generated PDF issue that could expose file contents.CVSS8.6HighEPSS0.34%RoutineCVE-2023-32089pegasystems · pega platform +1 morepegasystems pega platformPega Platform versions 8.1 to 8.8.2 are affected by an XSS issue with Pin descriptionCVSS6.1MediumEPSS0.34%RoutineCVE-2023-32088pegasystems · pega platform +1 morepegasystems pega platformPega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creationCVSS6.1MediumEPSS0.34%RoutineCVE-2023-32087pegasystems · pega platform +1 morepegasystems pega platformPega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creationCVSS6.1MediumEPSS0.34%PrioritiseCVE-2019-16374pega · platformpega platformPega Platform 8.2.1 allows LDAP injection because a username can contain a * character and can be of unlimited length. An attacker can specify four characters of a username, followed by the * character, to bypass access control.CVSS9.8CriticalEPSS1.88%RoutineCVE-2020-8775pega · platformpega platformPega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the comment tags.CVSS8.9HighEPSS0.84%RoutineCVE-2020-8773pega · platformpega platformThe Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability.CVSS8.9HighEPSS0.83%