Pegasystems

Records60All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical9CVSS 9.0–10.0

CVSS high14CVSS 7.0–8.9

Exploited now

Pegasystems records in CISA KEV

No Pegasystems vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Synchronization Engine · all components

TI-2023-11613 CVE-2023-26466 · GHSA-fp72-rfxv-mxwh

LOW 35

A user with non-Admin access can change a configuration file on the client to modify the Server URL.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00166 Published 2023-04-10 Fixed in 3.1.28 CWE-285

TI-2023-12672 CVE-2023-28093 · GHSA-qmpx-7mr8-9whr

LOW 34

A user with a compromised configuration can start an unsigned binary as a service.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01389 Published 2023-04-10 Fixed in 3.1.28 CWE-295

TI-2023-11614 CVE-2023-26467 · GHSA-2888-q29x-2g3p

LOW 25

A man in the middle can redirect traffic to a malicious server in a compromised configuration.

CVSS 3.1MEDIUM 5.4 Network No auth No interaction EPSS 0.00592 Published 2023-04-10 Fixed in 3.1.28 CWE-345