Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Pegasystems Pega Infinity Infinity 25.1.2 Clear all filters
TI-2026-01252 CVE-2026-1563 · GHSA-pcfw-jm9h-vg4m

Cross-site scripting in Pegasystems Pega Infinity

Priority LOW 22

Pega Platform versions 8.1.0 through 25.1.2 are affected by an Reflected Cross-site scripting (XSS) vulnerability in a user interface component.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00242 Published 2026-07-15 Fixed in Infinity 25.1.2 CWE-79
TI-2026-01251 CVE-2026-1562 · GHSA-9j28-r64w-w53x

Cross-site scripting in Pegasystems Pega Infinity

Priority LOW 21

Pega Platform versions 8.1.0 through 25.1.2 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component.

CVSS 4.0MEDIUM 4.6 Network High privileges User interaction EPSS 0.00242 Published 2026-07-15 Fixed in Infinity 25.1.2 CWE-79