Skip to content
OpenAdvisories
Medium WID-SEC-2026-1140 2 CVEs

Pega Platform: Mehrere Schwachstellen

Published Apr 15, 2026 · Updated Apr 15, 2026 · de-DE

Vendor: Pega Product: Platform Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Pega Platform ausnutzen, um Dateien zu manipulieren oder Cross-Site-Scripting-Angriffe durchzuführen.

Product

Pega ist eine Plattform für Workflow-Automatisierung und KI-gestützte Entscheidungsfindung.

Vulnerabilities 2

  • Medium 5.1
    CVE-2026-1564

    Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a developer role.

    Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a developer role.

    Pega Systems Pega Infinity
  • Medium 4.8
    CVE-2026-1711

    Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component. Requires a high privileged user with a developer role.

    Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component. Requires a high privileged user with a developer role.

    Pega Systems Pega Infinity

Revision history

  1. #1

    Initiale Fassung

References