6 matches found
CVE-2020-23957
Pega Platform through 8.4.x is affected by Cross Site Scripting XSS via the ConnectionID parameter, as demonstrated by a pyActivity=Data-TRACERSettings.pzStartTracerSession request to a PRAuth URI...
EUVD-2020-16694
Malware in sbrugna...
CVE-2020-23957
Pega Platform through 8.4.x is affected by Cross Site Scripting XSS via the ConnectionID parameter, as demonstrated by a pyActivity=Data-TRACERSettings.pzStartTracerSession request to a PRAuth URI...
CVE-2020-23957
Pega Platform through 8.4.x is affected by Cross Site Scripting XSS via the ConnectionID parameter, as demonstrated by a pyActivity=Data-TRACERSettings.pzStartTracerSession request to a PRAuth URI...
CVE-2020-23957: Improper Neutralization of Input During Web Page Generation
Pega Platform through 8.4.x is affected by Cross Site Scripting XSS via the ConnectionID parameter, as demonstrated by a pyActivity=Data-TRACERSettings.pzStartTracerSession request to a PRAuth URI...
PT-2020-15605
Name of the Vulnerable Software and Affected Versions Pega Platform versions prior to 8.5 Description The issue is related to Cross Site Scripting XSS and affects the Pega Platform. It occurs via the ConnectionID parameter, as demonstrated by a pyActivity=Data-TRACERSettings.pzStartTracerSession...