479 matches found
CVE-2025-62181: Observable Response Discrepancy
Pega Platform versions 7.1.0 through Infinity 25.1.0 are affected by a User Enumeration. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not. This only applies to deprecated...
PT-2025-50493
Name of the Vulnerable Software and Affected Versions Pega Platform versions 7.1.0 through Infinity 25.1.0 Description Pega Platform is affected by a User Enumeration issue. A remote unauthenticated user could determine the validity of a username by observing differences in response times during...
Pega Platform security vulnerabilities
Pega Platform is an enterprise management platform from Pega Corporation, USA. A security vulnerability exists in Pega Platform versions 7.1.0 through Infinity 25.1.0, which stems from a difference in response time during user authentication and could lead to a user enumeration attack...
CVE-2025-9559
Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data...
EUVD-2025-34772
Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data...
CVE-2025-9559
Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data...
CVE-2025-9559
Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data...
CVE-2025-9559
The CVE-2025-9559 entry affects Pega Platform versions 8.7.5 to Infinity 24.2.2, due to an Insecure Direct Object Reference in a user interface component that can only be used to read data. Affected products include Pega Platform as described across multiple sources (NVD, Red Hat, ENISA EUVD, CNN...
CVE-2025-9559 Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data
Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data...
CVE-2025-9559 Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data
Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data...
PT-2025-42483
Name of the Vulnerable Software and Affected Versions Pega Platform versions 8.7.5 through 24.2.2 Description The Pega Platform contains an Insecure Direct Object Reference issue within a user interface component. This issue allows for the reading of data. Recommendations Update to a version late...
CVE-2025-9559: Authorization Bypass Through User-Controlled Key
Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data...
Pega Platform security vulnerabilities
Pega Platform is an enterprise management platform from Pega Corporation, USA. A security vulnerability exists in Pega Platform versions 8.7.5 through 24.2.2, which stems from an insecure direct object reference in a user interface component that could lead to data readout...
EUVD-2017-8640
Malware in sbrugna...
EUVD-2021-14399
Malware in sbrugna...
EUVD-2017-2985
Malware in sbrugna...
EUVD-2020-7385
Malware in sbrugna...
EUVD-2017-2984
Malware in sbrugna...