« Volver al listado

CVE-2023-32087

Estado: ModificadaMedia (6.1)—

Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Pega — Platform

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-32087",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-32087",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-09-12T18:40:10.629128Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@pega.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.6,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.5,
        "exploitabilityScore": 2.1
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 6.1,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.7,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@pega.com",
      "affectedData": [
        {
          "vendor": "Pegasystems",
          "product": "Pega Platform",
          "versions": [
            {
              "status": "affected",
              "version": "8.1",
              "lessThan": "23.1.1",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2023-10-18T12:15:09.200",
  "references": [
    {
      "url": "https://support.pega.com/support-doc/pega-security-advisory-e23-vulnerability-remediation-note",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@pega.com"
    },
    {
      "url": "https://support.pega.com/support-doc/pega-security-advisory-e23-vulnerability-remediation-note",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@pega.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "\nPega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation\n\n\n\n\n\n"
    },
    {
      "lang": "es",
      "value": "Las versiones 8.1 a Infinity 23.1.0 de Pega Platform se ven afectadas por un problema XSS con la creación de tareas"
    }
  ],
  "lastModified": "2026-06-17T05:58:03.070",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:pega:platform:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "180E01BA-C5AD-471B-91D6-5A202988565F",
              "versionEndExcluding": "8.7.5",
              "versionStartIncluding": "8.1.0"
            },
            {
              "criteria": "cpe:2.3:a:pega:platform:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "09107B04-CE0B-4E89-ADCF-47001DEF68F0",
              "versionEndExcluding": "8.8.3",
              "versionStartIncluding": "8.8.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@pega.com"
}