Vulnerabilities

TI-2022-16122 CVE-2022-35656 · GHSA-gp84-wpgp-jv9x

Cross-site request forgery in Pegasystems Pega Infinity

LOW 21

Pega Platform from 8.3 to 8.7.3 vulnerability may allow authenticated security administrators to alter CSRF settings directly.

CVSS 3.1MEDIUM 4.5 Network High privileges User interaction EPSS 0.00342 Published 2022-08-22 Fixed in 8.7.3 CWE-352

TI-2022-16121 CVE-2022-35655 · GHSA-wvf4-j5w7-r38j

LOW 28

Pega Platform from 7.3 to 8.7.3 is affected by an XSS issue due to a misconfiguration of a datapage setting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.005 Published 2022-08-22 Fixed in 8.7.3 CWE-79

TI-2022-16120 CVE-2022-35654 · GHSA-4r6c-7c28-gmfr

LOW 28

Pega Platform from 8.5.4 to 8.7.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00544 Published 2022-08-22 Fixed in 8.7.3 CWE-79