CVE-2017-11355

Pegasystems PEGA Platform 7.2 ML0 and earlier are affected by multiple XSS vulnerabilities (CVE-2017-11355) allowing remote attackers to inject arbitrary scripts via PATH_INFO, the JavaBean viewer beanReference, or pyTableName on the System database schema modification page; CVE-2017-11356 also a...

CVE-2017-11355: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in PEGA Platform 7.2 ML0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO to the main page; the 2 beanReference parameter to the JavaBean viewer page; or the 3 pyTableName to the System database schema...

PT-2017-11955

Name of the Vulnerable Software and Affected Versions PEGA Platform versions 7.2 ML0 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters, including the PATH INFO to the main page, the beanReference parameter to the JavaBean view...