Lucene search

K
nvd[email protected]NVD:CVE-2023-50165
HistoryJan 31, 2024 - 6:15 p.m.

CVE-2023-50165

2024-01-3118:15:46
CWE-918
web.nvd.nist.gov
pega platform
pdf
vulnerability
versions
affected

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.4%

Pega Platform versions 8.2.1 to Infinity 23.1.0 are affected by an Generated PDF issue that could expose file contents.

Affected configurations

NVD
Node
pegaplatformRange8.2.123.1.0

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.4%

Related for NVD:CVE-2023-50165