PL
Product
Platform
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 4Low 0
Watch
Add Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-16374 | 9.8 | Aug 13 | Pega Platform 8.2.1 allows LDAP injection because a username can contain a * character and can be of unlimited length Affected: through 8.2.1 |
| CVE-2020-8775 | 8.9 | Apr 29 | Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the comment tags Affected: before 8.2.6 |
| CVE-2020-8773 | 8.9 | Apr 29 | The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability Affected: before 8.2.6 |
| CVE-2023-50165 | 8.6 | Jan 31 | Pega Platform versions 8.2.1 to Infinity 23.1.0 are affected by an Generated PDF issue that could expose file contents Affected: 8.2.1 through 23.1.0 |
| CVE-2023-50166 | 6.1 | Jan 31 | Pega Platform from 8.5.4 to 8.8.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter Affected: 8.5.4 through 8.8.3 |
| CVE-2023-32089 | 6.1 | Oct 18 | Pega Platform versions 8.1 to 8.8.2 are affected by an XSS issue with Pin description Affected: 8.1.0 through 8.8.2 |
| CVE-2023-32088 | 6.1 | Oct 18 | Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creation Affected: 8.1.0 before 8.7.5; 8.8.0 before 8.8.3 |
| CVE-2023-32087 | 6.1 | Oct 18 | Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation Affected: 8.1.0 before 8.7.5; 8.8.0 before 8.8.3 |
Showing 8