Low WID-SEC-2026-0941 1 CVE

Pega Platform: Schwachstelle ermöglicht Cross-Site Scripting

Published Mar 31, 2026 · Updated Mar 31, 2026 · de-DE

Vendor: Pega Product: Platform Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Pega Platform ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Pega ist eine Plattform für Workflow-Automatisierung und KI-gestützte Entscheidungsfindung.

Vulnerabilities 1

Medium 4.8

CVE-2025-62184

Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface component.

Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface component. Requires an administrative user and given extensive access rights, impact to Confidentiality is low and Integrity is none.

Pega Systems Pega Infinity

Mar 31, 2026

Revision history

2026-03-31 #1
Initiale Fassung

References

Pega Security Advisory vom 2026-03-31
https://support.pega.com/support-doc/pega-security-advisory-o25-vulnerability-remediation-note
EU Vulnerability Database vom 2026-03-31
https://euvd.enisa.europa.eu/enisa/EUVD-2025-209147