IN
Product
Infinity
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 1Medium 5Low 0
Watch
Add Infinity to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-10094 | 9.8 | Nov 20 | Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code Affected: 6.0 before 8.1.9; 8.2 before 8.2.8; 8.3.0 before 8.3.6; 8.4.0 before 8.4.6; 8.5 before 8.5.6; 8.6.0 before 8.6.6 ; +3 more |
| CVE-2022-24083 | 9.8 | Jul 25 | Password authentication bypass vulnerability for local accounts can be used to bypass local authentication checks Affected: 7.3.1 through 8.7.2 |
| CVE-2022-24082 | 9.8 | Jul 19 | If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Internet and port filtering is not properly configured, then it… Affected: 8.1.0 before 8.7.3 |
| CVE-2021-27651 | 9.8 | Apr 29 | In versions 8.2.1 through 8.5.2 of Pega Infinity, the password reset functionality for local accounts can be used to bypass local authentication checks Affected: 8.2.1 through 8.5.2 |
Showing 4