Lucene search
+L

382 matches found

Cvelist
Cvelist
added 2025/12/10 8:41 p.m.25 views

CVE-2025-62181 Pega Platform versions 7.1.0 through Infinity 25.1.0 are affected by a User Enumeration where during user authentication process, a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not.

Pega Platform versions 7.1.0 through Infinity 25.1.0 are affected by a User Enumeration. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not. This only applies to deprecated...

5.3CVSS0.00421EPSS
SaveExploits1References1
CVE
CVE
added 2025/12/10 8:41 p.m.19 views

CVE-2025-62181

CVE-2025-62181 affects Pega Platform versions 7.1.0 through Infinity 25.1.0. The issue is a user-enumeration in the authentication process caused by a detectable response-time difference, enabling remote unauthenticated actors to determine if a username exists. The root cause relates to the depre...

5.3CVSS6.8AI score0.00421EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/12/10 8:41 p.m.4 views

CVE-2025-62181 Pega Platform versions 7.1.0 through Infinity 25.1.0 are affected by a User Enumeration where during user authentication process, a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not.

Pega Platform versions 7.1.0 through Infinity 25.1.0 are affected by a User Enumeration. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not. This only applies to deprecated...

5.3CVSS6.8AI score0.00421EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/12/10 12:0 a.m.15 views

PT-2025-50493

Name of the Vulnerable Software and Affected Versions Pega Platform versions 7.1.0 through Infinity 25.1.0 Description Pega Platform is affected by a User Enumeration issue. A remote unauthenticated user could determine the validity of a username by observing differences in response times during...

5.3CVSS7AI score0.00421EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/12/10 12:0 a.m.7 views

Pega Platform 安全漏洞

Pega Platform is an enterprise management platform from Pega Corporation, USA. A security vulnerability exists in Pega Platform versions 7.1.0 through Infinity 25.1.0, which stems from a difference in response time during user authentication and could lead to a user enumeration attack...

5.3CVSS6.8AI score0.00421EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/10/17 3:52 p.m.12 views

CVE-2025-9559

Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data...

6.5CVSS6.8AI score0.00376EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/16 6:30 p.m.16 views

EUVD-2025-34772

Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data...

6.5CVSS6.2AI score0.00376EPSS
SaveExploits1References2
NVD
NVD
added 2025/10/16 4:15 p.m.32 views

CVE-2025-9559

Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data...

6.5CVSS0.00376EPSS
SaveExploits1References1
OSV
OSV
added 2025/10/16 4:15 p.m.4 views

CVE-2025-9559

Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data...

6.5CVSS5.7AI score0.00376EPSS
SaveExploits1References1
CVE
CVE
added 2025/10/16 3:28 p.m.23 views

CVE-2025-9559

The CVE-2025-9559 entry affects Pega Platform versions 8.7.5 to Infinity 24.2.2, due to an Insecure Direct Object Reference in a user interface component that can only be used to read data. Affected products include Pega Platform as described across multiple sources (NVD, Red Hat, ENISA EUVD, CNN...

6.5CVSS6.4AI score0.00376EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2025/10/16 3:28 p.m.35 views

CVE-2025-9559 Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data

Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data...

6.5CVSS0.00376EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/10/16 3:28 p.m.6 views

CVE-2025-9559 Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data

Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data...

6.5CVSS6.4AI score0.00376EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/10/16 12:0 a.m.8 views

Pega Platform 安全漏洞

Pega Platform is an enterprise management platform from Pega Corporation, USA. A security vulnerability exists in Pega Platform versions 8.7.5 through 24.2.2, which stems from an insecure direct object reference in a user interface component that could lead to data readout...

6.5CVSS6.6AI score0.00376EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/10/16 12:0 a.m.9 views

PT-2025-42483

Name of the Vulnerable Software and Affected Versions Pega Platform versions 8.7.5 through 24.2.2 Description The Pega Platform contains an Insecure Direct Object Reference issue within a user interface component. This issue allows for the reading of data. Recommendations Update to a version late...

6.5CVSS5.8AI score0.00376EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2020-29622

Malware in sbrugna...

8.8CVSS8.6AI score0.0083EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2019-7129

Malware in sbrugna...

9.8CVSS9.2AI score0.01876EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2017-8640

Malware in sbrugna...

4.8CVSS5.1AI score0.00512EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2017-2985

Malware in sbrugna...

6.5CVSS6.3AI score0.03503EPSS
SaveExploits4References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-29623

Malware in sbrugna...

8.9CVSS8.7AI score0.00839EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-16694

Malware in sbrugna...

6.1CVSS6.3AI score0.00677EPSS
SaveExploits1References2
Rows per page
Query Builder