Pega
Pega Platform: vulnerabilidades y CVE
Pega Platform tiene 8 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE8
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-50166 | Media (6.1) | 0.34% | — | 31 ene 2024 | Pega Platform from 8.5.4 to 8.8.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter. |
| CVE-2023-50165 | Alta (8.6) | 0.34% | — | 31 ene 2024 | Pega Platform versions 8.2.1 to Infinity 23.1.0 are affected by an Generated PDF issue that could expose file contents. |
| CVE-2023-32089 | Media (6.1) | 0.30% | — | 18 oct 2023 | Pega Platform versions 8.1 to 8.8.2 are affected by an XSS issue with Pin description |
| CVE-2023-32088 | Media (6.1) | 0.30% | — | 18 oct 2023 | Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creation |
| CVE-2023-32087 | Media (6.1) | 0.30% | — | 18 oct 2023 | Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation |
| CVE-2019-16374 | Crítica (9.8) | 1.9% | — | 13 ago 2020 | Pega Platform 8.2.1 allows LDAP injection because a username can contain a * character and can be of unlimited length. An attacker can specify four characters of a username, followed by the * character, to bypass access… |
| CVE-2020-8775 | Alta (8.9) | 0.84% | — | 29 abr 2020 | Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the comment tags. |
| CVE-2020-8773 | Alta (8.9) | 0.83% | — | 29 abr 2020 | The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability. |