Platform Security Vulnerabilities and Issues — Platform CVE List

Lucene search

PegaPlatform

3 matches found

CVE•added 2020/08/13 1:15 p.m.•36 views

CVE-2019-16374

Pega Platform 8.2.1 allows LDAP injection because a username can contain a * character and can be of unlimited length. An attacker can specify four characters of a username, followed by the * character, to bypass access control.

9.8CVSS9.4AI score0.01174EPSS

CVE•added 2020/04/29 4:15 p.m.•33 views

CVE-2020-8775

Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the comment tags.

8.9CVSS6.9AI score0.00535EPSS

CVE•added 2020/04/29 3:15 p.m.•29 views

CVE-2020-8773

The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability.

8.9CVSS7.2AI score0.00535EPSS