Lucene search
HistoryOct 18, 2023 - 12:15 p.m.
CVE-2023-32088
pega platform
xss
vulnerability
versions
8.1
infinity 23.1.0
ad-hoc case creation
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
5
Confidence
High
EPSS
0.001
Percentile
20.2%
Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creation
Affected configurations
Node
pegaplatformRange8.1.0–8.7.5
ORpegaplatformRange8.8.0–8.8.3
Related
cvelist
cvelist
CVE-2023-32088
2023-10-18 11:42:31
prion
prion
Cross site scripting
2023-10-18 12:15:00
vulnrichment
vulnrichment
CVE-2023-32088
2023-10-18 11:42:31
cve
cve
CVE-2023-32088
2023-10-18 12:15:09
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
5
Confidence
High
EPSS
0.001
Percentile
20.2%
Related for NVD:CVE-2023-32088