Vendors / Pegasystems Records 60 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 9
CVSS high 14
Exploited now Pegasystems records in CISA KEV No Pegasystems vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 74
In versions 8.2.1 through 8.5.2 of Pega Infinity, the password reset functionality for local accounts can be used to bypass local authentication checks.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.53841 · Published 2021-04-29 · Fixed in 8.5.2 CWE-287
Priority MEDIUM 56
If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Internet and port filtering is not properly configured, then it may be possible to upload serialized pay…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.12191 · Published 2022-07-19 · Fixed in 8.7.3 CWE-502
Priority MEDIUM 44
Password authentication bypass vulnerability for local accounts can be used to bypass local authentication checks.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00936 · Published 2022-07-25 · Fixed in 8.7.2 CWE-285
Priority MEDIUM 43
Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0048 · Published 2024-11-20 · Fixed in 24.1.2 CWE-94
Priority LOW 35
Forgotten password reset functionality for local accounts can be used to bypass local authentication checks.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00603 · Published 2022-01-28 · Fixed in 8.6.1 CWE-640
Priority LOW 31
Misconfiguration of the Pega Chat Access Group portal in Pega platform 7.4.0 - 8.5.x could lead to unintended data exposure.
CVSS 3.1 MEDIUM 6.6· Network · High privileges · No interaction · EPSS 0.01125 · Published 2021-04-01 · Fixed in 8.5.3 CWE-284
Priority LOW 26
Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an XSS issue with search.
CVSS 3.1 MEDIUM 5.9· Network · No auth · User interaction · EPSS 0.00215 · Published 2024-12-05 · Fixed in 24.2.1 CWE-79
Priority LOW 24
Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with case type.
CVSS 3.1 MEDIUM 5.5· Network · High privileges · No interaction · EPSS 0.00259 · Published 2024-09-12 · Fixed in 24.1.3 CWE-79
Priority LOW 24
Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with App name.
CVSS 3.1 MEDIUM 5.5· Network · High privileges · No interaction · EPSS 0.00259 · Published 2024-09-12 · Fixed in 24.1.3 CWE-79
Priority LOW 23
Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage.
CVSS 3.1 MEDIUM 5.2· Network · High privileges · User interaction · EPSS 0.00259 · Published 2024-09-12 · Fixed in 24.1.3 CWE-74
Open these records in search → All records by CVSS severity
9 14 37 0 0
THREATIST.IORead the docs