Improper access control

Pega Platform 8.2.1 allows LDAP injection because a username can contain a character and can be of unlimited length. An attacker can specify four characters of a username, followed by the character, to bypass access control...

CVE-2019-16374

Pega Platform 8.2.1 allows LDAP injection because a username can contain a character and can be of unlimited length. An attacker can specify four characters of a username, followed by the character, to bypass access control...

CVE-2019-16374

Vulnerability: Pega Platform 8.2.1 exposes an LDAP injection via usernames that can contain a * and be of unlimited length, enabling bypass of access control. Root cause (per sources): The username field allows a star character and unbounded length, which an attacker can exploit by supplying four...

Pegasystem PEGA Platform Richtext Editor Cross-Site Scripting Vulnerability

Pegasystem PEGA Platform is a suite of application development platforms from Pegasystem in the UK. The platform is used to develop applications for BPM Business Process Management, Case Management, Real-time Decision Making and CRM Customer Relationship Management.Richtext Editor is one of the...

Pegasystem PEGA Platform Cross-Site Scripting Vulnerability (CNVD-2020-27232)

Pegasystem PEGA Platform is a suite of application development platforms from Pegasystem UK. The platform is used to develop applications for BPM Business Process Management, Case Management, Real Time Decision Making and CRM Customer Relationship Management. A cross-site scripting vulnerability...

CVE-2020-8775

Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting XSS vulnerability in the comment tags...

CVE-2020-8775

Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting XSS vulnerability in the comment tags...

Cross site scripting

Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting XSS vulnerability in the comment tags...

CVE-2020-8775

Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting XSS vulnerability in the comment tags...

CVE-2020-8775

Pega Platform before version 8.2.6 is affected by a Stored Cross‑Site Scripting (XSS) vulnerability in the Comments tab. Root cause noted in CNVD as lack of proper validation of client‑side data in the WEB application, enabling execution of client‑side code. Affected product is Pegasystem Pega Pl...

CVE-2020-8773

The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting XSS vulnerability...

CVE-2020-8773

The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting XSS vulnerability...

CVE-2020-8774

Pega Platform before version 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the "ActionStringID" function...

CVE-2020-8774

Pega Platform before version 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the "ActionStringID" function...

Cross site scripting

The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting XSS vulnerability...

Cross site scripting

Pega Platform before version 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the "ActionStringID" function...

CVE-2020-8773

The CVE-2020-8773 entry affects Pegasystem’s Pega Platform Richtext Editor prior to version 8.2.6, with a Stored Cross-Site Scripting (XSS) vulnerability. The CNVD entry attributes the issue to a lack of proper client-side data validation, and Red Hat/CNVD/NVD references confirm the same flaw. CV...

CVE-2020-8773

The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting XSS vulnerability...

CVE-2020-8774

Pega Platform before version 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the "ActionStringID" function...

CVE-2020-8774

Pega Platform prior to 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the ActionStringID function. The CNVD entry notes that an attacker can exploit this to execute client-side code. Affected product/version: Pegasystem Pega Platform