Pegasystems Pega Platform vulnerabilities
10 vulnerabilities
Known vulnerabilities in Pegasystems Pega Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2023-50168pegasystems · pega platform +1 morepegasystems pega platformPega Platform from 6.x to 8.8.4 is affected by an XXE issue with PDF Generation.CVSS7.7HighEPSS0.39%RoutineCVE-2023-50167pegasystems · pega platform +1 morepegasystems pega platformPega Platform from 7.1.7 to 23.1.1 is affected by an XSS issue with editing/rendering user html content.CVSS6.1MediumEPSS0.30%RoutineCVE-2023-50166pegasystems · pega platform +1 morepegasystems pega platformPega Platform from 8.5.4 to 8.8.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter.CVSS6.1MediumEPSS0.34%RoutineCVE-2023-50165pegasystems · pega platform +1 morepegasystems pega platformPega Platform versions 8.2.1 to Infinity 23.1.0 are affected by an Generated PDF issue that could expose file contents.CVSS8.6HighEPSS0.34%RoutineCVE-2023-32089pegasystems · pega platform +1 morepegasystems pega platformPega Platform versions 8.1 to 8.8.2 are affected by an XSS issue with Pin descriptionCVSS6.1MediumEPSS0.34%RoutineCVE-2023-32088pegasystems · pega platform +1 morepegasystems pega platformPega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creationCVSS6.1MediumEPSS0.34%RoutineCVE-2023-32087pegasystems · pega platform +1 morepegasystems pega platformPega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creationCVSS6.1MediumEPSS0.34%RoutineCVE-2023-4843pegasystems · pega platform +1 morepegasystems pega platformPega Platform versions 7.1 to 8.8.3 are affected by an HTML Injection issue with a name field utilized in Visual Business Director, however this field can only be modified by an authenticated administrative user.CVSS4.8MediumEPSS0.34%PrioritiseCVE-2023-32090pegasystems · pega platform +1 morepegasystems pega platformPega platform clients who are using versions 6.1 through 7.3.1 may be
utilizing default credentialsCVSS9.8CriticalEPSS0.62%PrioritiseCVE-2023-28094pegasystems · pega platform +1 morepegasystems pega platformPega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a version prior to 8.x may be utilizing default credentials.CVSS9.8CriticalEPSS0.53%