Skip to content
OpenAdvisories
Medium WID-SEC-2026-0431 1 CVE

Pega Platform: Schwachstelle ermöglicht Cross-Site Scripting

Published Feb 16, 2026 · Updated Feb 16, 2026 · de-DE

Vendor: Pega Product: Platform Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Pega Platform ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Pega ist eine Plattform für Workflow-Automatisierung und KI-gestützte Entscheidungsfindung.

Vulnerabilities 1

  • Medium 4.8
    CVE-2025-62183

    Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-site Scripting vulnerability in a user interface component. Requires an administrative user and given extensive access rights, impact to Confidentiality and Integrity are low.

    Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-site Scripting vulnerability in a user interface component. Requires an administrative user and given extensive access rights, impact to Confidentiality and Integrity are low.

    Pega Systems Pega Infinity

Revision history

  1. #1

    Initiale Fassung

References