Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Pega Platform ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.
Product
Pega ist eine Plattform für Workflow-Automatisierung und KI-gestützte Entscheidungsfindung.
Vulnerabilities 2
-
Medium 4.8
Pega Platform versions 8.1.0 through 25.1.2 are affected by an Reflected Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.
Pega Platform versions 8.1.0 through 25.1.2 are affected by an Reflected Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.
-
Medium 4.6
Pega Platform versions 8.1.0 through 25.1.2 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.
Pega Platform versions 8.1.0 through 25.1.2 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.
Revision history
-
#1
Initiale Fassung
References
-
Pega Security Advisory vom 2026-07-15
https://support.pega.com/support-doc/pega-security-advisory-e26-vulnerability-remediation-note
-
GitHub Advisory Database vom 2026-07-15
https://github.com/advisories/GHSA-9J28-R64W-W53X
-
GitHub Advisory Database vom 2026-07-15
https://github.com/advisories/GHSA-PCFW-JM9H-VG4M