Pega Platform
8 CVEs affecting Pega Platform. Latest disclosed: 2024-01-31. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-16374 | Critical | 9.8 | 2020-08-13 | Pega Platform 8.2.1 allows LDAP injection because a username can contain a * character and can be of unlimited length. An attacker can specify four characters… |
CVE-2020-8775 | High | 8.9 | 2020-04-29 | Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the comment tags. |
CVE-2020-8773 | High | 8.9 | 2020-04-29 | The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability. |
CVE-2023-50165 | High | 8.5 | 2024-01-31 | Pega Platform versions 8.2.1 to Infinity 23.1.0 are affected by an Generated PDF issue that could expose file contents. |
CVE-2023-50166 | Medium | 6.1 | 2024-01-31 | Pega Platform from 8.5.4 to 8.8.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter. |
CVE-2023-32089 | Medium | 4.6 | 2023-10-18 | Pega Platform versions 8.1 to 8.8.2 are affected by an XSS issue with Pin description |
CVE-2023-32088 | Medium | 4.6 | 2023-10-18 | Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creation |
CVE-2023-32087 | Medium | 4.6 | 2023-10-18 | Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation |