CVE-2020-8775

Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting XSS vulnerability in the comment tags...

CVE-2020-8775

Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting XSS vulnerability in the comment tags...

Cross site scripting

Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting XSS vulnerability in the comment tags...

CVE-2020-8775

Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting XSS vulnerability in the comment tags...

CVE-2020-8775

Pega Platform before version 8.2.6 is affected by a Stored Cross‑Site Scripting (XSS) vulnerability in the Comments tab. Root cause noted in CNVD as lack of proper validation of client‑side data in the WEB application, enabling execution of client‑side code. Affected product is Pegasystem Pega Pl...

CVE-2020-8774

Pega Platform before version 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the "ActionStringID" function...

CVE-2020-8773

The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting XSS vulnerability...

CVE-2020-8773

The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting XSS vulnerability...

CVE-2020-8774

Pega Platform before version 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the "ActionStringID" function...

Cross site scripting

The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting XSS vulnerability...

Cross site scripting

Pega Platform before version 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the "ActionStringID" function...

CVE-2020-8773

The CVE-2020-8773 entry affects Pegasystem’s Pega Platform Richtext Editor prior to version 8.2.6, with a Stored Cross-Site Scripting (XSS) vulnerability. The CNVD entry attributes the issue to a lack of proper client-side data validation, and Red Hat/CNVD/NVD references confirm the same flaw. CV...

CVE-2020-8773

The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting XSS vulnerability...

CVE-2020-8774

Pega Platform before version 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the "ActionStringID" function...

CVE-2020-8774

Pega Platform prior to 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the ActionStringID function. The CNVD entry notes that an attacker can exploit this to execute client-side code. Affected product/version: Pegasystem Pega Platform

CVE-2020-8773: Improper Neutralization of Input During Web Page Generation

The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting XSS vulnerability...

CVE-2020-8774: Improper Neutralization of Input During Web Page Generation

Pega Platform before version 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the "ActionStringID" function...

CVE-2020-8775: Improper Neutralization of Input During Web Page Generation

Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting XSS vulnerability in the comment tags...

PT-2020-20267

Name of the Vulnerable Software and Affected Versions Pega Platform versions prior to 8.2.6 Description The issue is related to a Stored Cross-Site Scripting XSS vulnerability in the comment tags. Recommendations For versions prior to 8.2.6, update to version 8.2.6 or later to resolve the issue...

Pegasystem PEGA Platform Information Disclosure Vulnerability (CNVD-2019-45126)

Pegasystem PEGA Platform is a suite of application development platforms from Pegasystem UK. The platform is used to develop applications for BPM Business Process Management, Case Management, Real Time Decision Making and CRM Customer Relationship Management. An information disclosure vulnerabili...