Pegasystems vulnerabilities, page 2
46 vulnerabilities
Known vulnerabilities in Pegasystems products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 5 products.
RoutineCVE-2024-10716pegasystems · pega infinity +1 morepegasystems pega infinityPega Platform versions 8.1 to Infinity 24.2.0 are affected by an XSS issue with search.CVSS5.9MediumEPSS0.21%PrioritiseCVE-2024-10094pegasystems · pega infinity +1 morepegasystems pega infinityPega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of CodeCVSS9.8CriticalEPSS0.48%RoutineCVE-2024-6702pegasystems · pega infinity +1 morepegasystems pega infinityPega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage.CVSS5.2MediumEPSS0.26%RoutineCVE-2024-6701pegasystems · pega infinity +1 morepegasystems pega infinityPega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with case type.CVSS5.5MediumEPSS0.26%RoutineCVE-2024-6700pegasystems · pega infinity +1 morepegasystems pega infinityPega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with App name.CVSS5.5MediumEPSS0.26%RoutineCVE-2023-50168pegasystems · pega platform +1 morepegasystems pega platformPega Platform from 6.x to 8.8.4 is affected by an XXE issue with PDF Generation.CVSS7.7HighEPSS0.39%RoutineCVE-2023-50167pegasystems · pega platform +1 morepegasystems pega platformPega Platform from 7.1.7 to 23.1.1 is affected by an XSS issue with editing/rendering user html content.CVSS6.1MediumEPSS0.30%RoutineCVE-2023-50166pegasystems · pega platform +1 morepegasystems pega platformPega Platform from 8.5.4 to 8.8.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter.CVSS6.1MediumEPSS0.34%RoutineCVE-2023-50165pegasystems · pega platform +1 morepegasystems pega platformPega Platform versions 8.2.1 to Infinity 23.1.0 are affected by an Generated PDF issue that could expose file contents.CVSS8.6HighEPSS0.34%RoutineCVE-2023-32089pegasystems · pega platform +1 morepegasystems pega platformPega Platform versions 8.1 to 8.8.2 are affected by an XSS issue with Pin descriptionCVSS6.1MediumEPSS0.34%RoutineCVE-2023-32088pegasystems · pega platform +1 morepegasystems pega platformPega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creationCVSS6.1MediumEPSS0.34%RoutineCVE-2023-32087pegasystems · pega platform +1 morepegasystems pega platformPega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creationCVSS6.1MediumEPSS0.34%RoutineCVE-2023-4843pegasystems · pega platform +1 morepegasystems pega platformPega Platform versions 7.1 to 8.8.3 are affected by an HTML Injection issue with a name field utilized in Visual Business Director, however this field can only be modified by an authenticated administrative user.CVSS4.8MediumEPSS0.34%PrioritiseCVE-2023-32090pegasystems · pega platform +1 morepegasystems pega platformPega platform clients who are using versions 6.1 through 7.3.1 may be
utilizing default credentialsCVSS9.8CriticalEPSS0.62%PrioritiseCVE-2023-28094pegasystems · pega platform +1 morepegasystems pega platformPega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a version prior to 8.x may be utilizing default credentials.CVSS9.8CriticalEPSS0.53%RoutineCVE-2023-26465pegasystems · pega infinity +1 morepegasystems pega infinityPega Platform versions 7.2 to 8.8.1 are affected by an XSS issue.CVSS8.0HighEPSS0.44%RoutineCVE-2023-28093pegasystems · rpa: synchronization engine +1 morepegasystems rpa: synchronization engineA user with a compromised configuration can start an unsigned binary as a service.CVSS7.5HighEPSS1.39%RoutineCVE-2023-26467pegasystems · rpa: synchronization engine +1 morepegasystems rpa: synchronization engineA man in the middle can redirect traffic to a malicious server in a compromised configuration.CVSS8.1HighEPSS0.59%RoutineCVE-2023-26466pegasystems · rpa: synchronization engine +1 morepegasystems rpa: synchronization engineA user with non-Admin access can change a configuration file on the client to modify the Server URL.CVSS7.8HighEPSS0.17%RoutineCVE-2022-35656pegasystems · pega infinity +1 morepegasystems pega infinityPega Platform from 8.3 to 8.7.3 vulnerability may allow authenticated security administrators to alter CSRF settings directly.CVSS6.8MediumEPSS0.33%