Pegasystems

Records60All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical9CVSS 9.0–10.0

CVSS high14CVSS 7.0–8.9

Exploited now

Pegasystems records in CISA KEV

No Pegasystems vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pega Platform 29 records MEDIUM Infinity 10 records HIGH Platform 8 records MEDIUM Synchronization Engine 3 records LOW

Records

8 records in Platform · all components

TI-2019-12313 CVE-2019-16374 · GHSA-pmcq-jc5w-xg5x

Pega Platform 8.2.1 allows LDAP injection because a username can contain a * character…

MEDIUM 46

Pega Platform 8.2.1 allows LDAP injection because a username can contain a * character and can be of unlimited length.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01876 Published 2020-08-13 No fix listed

TI-2023-27407 CVE-2023-50165 · GHSA-43fw-h62p-gjw8

Pega Platform versions 8.2.1 to Infinity 23.1.0 are affected by an Generated PDF issue that could expose file contents.

MEDIUM 43

Pega Platform versions 8.2.1 to Infinity 23.1.0 are affected by an Generated PDF issue that could expose file contents.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00338 Published 2024-01-31 No fix listed CWE-918

TI-2020-07036 CVE-2020-8775 · GHSA-8xr2-4c75-r39r

Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the comment tags.

MEDIUM 40

Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the comment tags.

CVSS 3.1HIGH 8.9 Network Low privileges User interaction EPSS 0.00839 Published 2020-04-29 No fix listed CWE-79

TI-2020-07034 CVE-2020-8773 · GHSA-9j2c-5587-pff7

The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability.

MEDIUM 40

The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1HIGH 8.9 Network Low privileges User interaction EPSS 0.0083 Published 2020-04-29 No fix listed CWE-79

TI-2023-27408 CVE-2023-50166 · GHSA-3r8w-gj6v-wq3r

Pega Platform from 8.5.4 to 8.8.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter.

LOW 27

Pega Platform from 8.5.4 to 8.8.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00336 Published 2024-01-31 No fix listed CWE-79

TI-2023-15392 CVE-2023-32089 · GHSA-9qvm-7q24-7mg9

Pega Platform versions 8.1 to 8.8.2 are affected by an XSS issue with Pin description

LOW 27

Pega Platform versions 8.1 to 8.8.2 are affected by an XSS issue with Pin description

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00341 Published 2023-10-18 Fixed in 8.8.3 CWE-79

TI-2023-15391 CVE-2023-32088 · GHSA-p54m-3wc3-2mv6

Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creation

LOW 27

Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creation

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00341 Published 2023-10-18 Fixed in 23.1.1 CWE-79

TI-2023-15390 CVE-2023-32087 · GHSA-vwm5-j2mm-8pxx

Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation

LOW 27

Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00341 Published 2023-10-18 Fixed in 23.1.1 CWE-79

Open these records in search →

Critical	9
High	14
Medium	37
Low	0
No CVSS	0