Skip to content
OpenAdvisories

Vendor

Pega Systems

47 known vulnerabilities.

Products

Pega Infinity 31 Pega Platform 10 RPA: Synchronization Engine 3 Pega Robot Studio 2 Pega Browser Extension (PBE) 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.0
    CVE-2026-0898

    An arbitrary file-write vulnerability in Pega Browser Extension (PBE) affects Pega Robot Studio developers who are automating Google Chrome and Microsoft Edge using either version 22.1 or R25.

    An arbitrary file-write vulnerability in Pega Browser Extension (PBE) affects Pega Robot Studio developers who are automating Google Chrome and Microsoft Edge using either version 22.1 or R25. This vulnerability does not affect Robot Runtime users. A bad acto…

    Pega Systems Pega Robot Studio
  • Critical 9.1
    CVE-2024-10094

    Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code

    Pega Systems Pega Infinity
  • Critical 9.8
    CVE-2023-32090

    Pega platform clients who are using versions 6.1 through 7.3.1 may be utilizing default credentials

    Pega Systems Pega Platform
  • Critical 9.8
    CVE-2022-24083

    Password authentication bypass vulnerability for local accounts can be used to bypass local authentication checks.

    Pega Systems Pega Infinity
  • Critical 9.8
    CVE-2022-24082 Public exploit EPSS 12%

    If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Int…

    Pega Systems Pega Infinity
  • Critical 9.8
    CVE-2021-27651 Public exploit Scanner template EPSS 54%

    In versions 8.2.1 through 8.5.2 of Pega Infinity, the password reset functionality for local accounts can be used to by…

    Pega Systems Pega Infinity