382 matches found
CVE-2024-6701
Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with case type...
CVE-2024-6701
Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with case type...
CVE-2024-6701
CVE-2024-6701 affects Pega Platform versions 8.1 through Infinity 24.1.2 with an XSS issue in the case type. Attack vector is network, with high privileges required and user interaction R equired, and it may impact confidentiality and integrity (as per NVD metrics). The description does not provi...
CVE-2024-6700
Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with App name...
CVE-2024-6700
Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with App name...
CVE-2024-6700
Pega Platform (versions 8.1 to Infinity 24.1.2) is affected by a Cross-Site Scripting (XSS) vulnerability in the App name. The available documents identify the issue as XSS but do not specify the underlying code path or root cause details. The PT-2024-37807 entry consistently lists the affected r...
Pegasystem PEGA Platform 安全漏洞
Pegasystem PEGA Platform is a suite of application development platforms from Pegasystem, USA. The platform is used to develop applications such as BPM Business Process Management, Case Management, Real-Time Decision Making and CRM Customer Relationship Management. A security vulnerability exists...
PT-2024-37809 · Pegasystems · Pega Platform
Name of the Vulnerable Software and Affected Versions: Pega Platform versions 8.1 to 24.1.2 Description: The issue is an HTML Injection problem involving Stage. Recommendations: For Pega Platform versions 8.1 to 24.1.2, at the moment, there is no information about a newer version that contains a...
PT-2024-37807 · Pegasystems · Pega Platform
Name of the Vulnerable Software and Affected Versions: Pega Platform versions 8.1 to Infinity 24.1.2 Description: The issue is related to Cross-Site Scripting XSS in the Pega Platform, specifically with the App name. Recommendations: For Pega Platform versions 8.1 to Infinity 24.1.2, update to a...
CVE-2023-50168
Pega Platform from 6.x to 8.8.4 is affected by an XXE issue with PDF Generation...
CVE-2023-50168
Pega Platform from 6.x to 8.8.4 is affected by an XXE issue with PDF Generation...
CVE-2023-50168
Pega Platform from 6.x to 8.8.4 is affected by an XXE issue with PDF Generation...
CVE-2023-50168
Pega Platform from 6.x to 8.8.4 is affected by an XXE issue with PDF Generation...
CVE-2023-50168
CVE-2023-50168 affects Pegasystem Pega Platform versions 6.x through 8.8.4, due to an XML External Entity (XXE) vulnerability in PDF generation. The NVD and related sources classify the impact as high (CVSSv3.1: 7.7, Confidentiality Impact: High, Attack Vector: Network, Privileges Required: Low, ...
CVE-2023-50167
Pega Platform from 7.1.7 to 23.1.1 is affected by an XSS issue with editing/rendering user html content...
CVE-2023-50167
Pega Platform from 7.1.7 to 23.1.1 is affected by an XSS issue with editing/rendering user html content...
Cross site scripting
Pega Platform from 7.1.7 to 23.1.1 is affected by an XSS issue with editing/rendering user html content...
CVE-2023-50167
CVE-2023-50167 affects Pega Platform versions 7.1.7 through 23.1.1 with an XSS vulnerability in editing/rendering user HTML content. The Red Hat and NVD entries corroborate the same issue; Red Hat cites the affected range and description, while other sources reiterate the impact. The underlying r...