Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-9559 EUVD-2025-34772GHSA-2v78-25vx-vfrh

Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data

Published Oct 16, 2025 · Updated Oct 16, 2025 · Assigned by Pega

Vendor: Pega Systems Product: Pega Infinity

Description

Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data.

Affected products

VendorProductAffectedFixed
Pegasystems Pega Infinity 8.7.5 – < Infinity 24.2.3 Infinity 24.2.3

Advisories 1

References