Lucene search

K
cvelistPegaCVELIST:CVE-2023-32089
HistoryOct 18, 2023 - 11:45 a.m.

CVE-2023-32089

2023-10-1811:45:16
CWE-79
Pega
www.cve.org
3
pega platform
xss
8.1-8.8.2

CVSS3

4.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

EPSS

0.001

Percentile

20.2%

Pega Platform versions 8.1 to 8.8.2 are affected by an XSS issue with Pin description

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Pega Platform",
    "vendor": "Pegasystems",
    "versions": [
      {
        "lessThan": "8.8.3",
        "status": "affected",
        "version": "8.1",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

4.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

EPSS

0.001

Percentile

20.2%

Related for CVELIST:CVE-2023-32089