Description
Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface component. Requires an administrative user and given extensive access rights, impact to Confidentiality is low and Integrity is none.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Pegasystems | Pega Infinity | 8.1.0 – < Infinity 25.1.0 | Infinity 25.1.0 |
Advisories 1
- WID-SEC-2026-0941 Pega Platform: Schwachstelle ermöglicht Cross-Site Scripting BSI CERT-Bund (WID) · Mar 31, 2026