382 matches found
CVE-2025-2160
Pega Platform versions 8.4.3 to Infinity 24.2.1 are affected by an XSS issue with Mashup...
CVE-2025-2161
CVE-2025-2161 affects Pega Platform versions 7.2.1 through Infinity 24.2.1 with an XSS issue in the Mashup feature. The connected documents consistently describe the vulnerability as a Mashup-related cross-site scripting problem and list the affected version range. No concrete exploit details, CV...
CVE-2025-2161
Pega Platform versions 7.2.1 to Infinity 24.2.1 are affected by an XSS issue with Mashup...
CVE-2025-2161
Pega Platform versions 7.2.1 to Infinity 24.2.1 are affected by an XSS issue with Mashup...
CVE-2025-2160
Pega Platform versions 8.4.3 through Infinity 24.2.1 are affected by a Mashup-related XSS vulnerability (CVE-2025-2160). The issue arises from improper neutralization of input during web page generation, enabling cross-site scripting. Affected component: Mashup functionality within Pega Platform;...
CVE-2025-2160
Pega Platform versions 8.4.3 to Infinity 24.2.1 are affected by an XSS issue with Mashup...
CVE-2025-2160
Pega Platform versions 8.4.3 to Infinity 24.2.1 are affected by an XSS issue with Mashup...
PT-2025-16243 · Pegasystems · Pega Platform
Name of the Vulnerable Software and Affected Versions: Pega Platform versions 8.4.3 through Infinity 24.2.1 Description: The issue is related to an XSS problem with Mashup, which is caused by improper neutralization of input during web page generation, also known as cross-site scripting. This is...
Pegasystem Pega Platform 安全漏洞
Pegasystem Pega Platform is a suite of application development platforms from the American company Pegasystem. The platform is used to develop applications such as BPM Business Process Management, Case Management, Real-Time Decision Making and CRM Customer Relationship Management. A security...
CVE-2022-24082
If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Internet and port filtering is not properly configured, then it may be possible to upload serialized payloads to attack the underlying system. This does not affect systems running o...
CVE-2024-10094
Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code...
PT-2025-16244 · Pegasystems · Pega Platform
Name of the Vulnerable Software and Affected Versions: Pega Platform versions 7.2.1 through Infinity 24.2.1 Description: The issue is related to an XSS problem with Mashup in Pega Platform. Recommendations: For Pega Platform versions 7.2.1 through Infinity 24.2.1, consider disabling the Mashup...
CVE-2024-12211
Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an Stored XSS issue with profile...
CVE-2024-12211
Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an Stored XSS issue with profile...
CVE-2024-12211
Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an Stored XSS issue with profile...
CVE-2024-12211
Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an Stored XSS issue with profile...
CVE-2024-12211
CVE-2024-12211 affects Pega Platform from versions 8.1 to Infinity 24.2.0 with a profile-stored Cross-Site Scripting (XSS) vulnerability. The issue is described as a stored XSS in the profile component; no detailed root cause is provided in the initial description, and exploitation status is not ...
PT-2025-1782 · Pegasystems · Pega Platform
Name of the Vulnerable Software and Affected Versions: Pega Platform versions 8.1 to Infinity 24.2.0 Description: The issue is related to a Stored XSS problem with the profile. Recommendations: For Pega Platform versions 8.1 to Infinity 24.2.0, update to a version newer than Infinity 24.2.0 to...