Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Pegasystems Pega Infinity Infinity 25.1.2 Clear all filters
TI-2026-01394 CVE-2026-1711 · GHSA-332r-xc5m-v45j

Cross-site scripting in Pegasystems Pega Infinity

Priority LOW 21

Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00187 Published 2026-04-15 Fixed in Infinity 25.1.2 CWE-79
TI-2026-01253 CVE-2026-1564 · GHSA-hm98-22vr-c62v

Cross-site scripting in Pegasystems Pega Infinity

Priority LOW 22

Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00187 Published 2026-04-15 Fixed in Infinity 25.1.2 CWE-80