Pega Systems

47 results · Feed

• Medium 6.1
  CVE-2022-35655

  Pega Platform from 7.3 to 8.7.3 is affected by an XSS issue due to a misconfiguration of a datapage setting.

  Pega Systems Pega Infinity
  Aug 22, 2022
• Medium 6.1
  CVE-2022-35654

  Pega Platform from 8.5.4 to 8.7.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter.

  Pega Systems Pega Infinity
  Aug 22, 2022
• Critical 9.8
  CVE-2022-24083

  Password authentication bypass vulnerability for local accounts can be used to bypass local authentication checks.

  Pega Systems Pega Infinity
  Jul 25, 2022
• Critical 9.8
  CVE-2022-24082 Public exploit EPSS 12%

  If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Int…

  Pega Systems Pega Infinity
  Jul 19, 2022
• High 8.8
  CVE-2021-27654

  Forgotten password reset functionality for local accounts can be used to bypass local authentication checks.

  Pega Systems Pega Infinity
  Jan 28, 2022
• Critical 9.8
  CVE-2021-27651 Public exploit Scanner template EPSS 54%

  In versions 8.2.1 through 8.5.2 of Pega Infinity, the password reset functionality for local accounts can be used to by…

  Pega Systems Pega Infinity
  Apr 29, 2021
• Medium 6.6
  CVE-2021-27653

  Misconfiguration of the Pega Chat Access Group portal in Pega platform 7.4.0 - 8.5.x could lead to unintended data expo…

  Pega Systems Pega Infinity
  Apr 1, 2021