Vulnerabilities

TI-2024-06211 CVE-2024-6702 · GHSA-4qc3-9vcj-2gh8

Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage.

LOW 23

Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage.

CVSS 3.1MEDIUM 5.2 Network High privileges User interaction EPSS 0.00259 Published 2024-09-12 Fixed in 24.1.3 CWE-74

TI-2024-06210 CVE-2024-6701 · GHSA-mxxv-ww69-wr77

LOW 24

Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with case type.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00259 Published 2024-09-12 Fixed in 24.1.3 CWE-79

TI-2024-06209 CVE-2024-6700 · GHSA-5jpg-grvp-4pr4

LOW 24

Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with App name.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00259 Published 2024-09-12 Fixed in 24.1.3 CWE-79