agentprime: pegasystems-pega-infinityEvery new CVE for pegasystems-pega-infinity.https://agentprime.io/CVE-2026-13761: Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop conditions, potentially leading to a denial of service or other consequences becaus…https://agentprime.io/advisories/CVE-2026-13761/https://agentprime.io/advisories/CVE-2026-13761/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 13:11:34 GMTCVECVE-2026-10754: Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls.https://agentprime.io/advisories/CVE-2026-10754/https://agentprime.io/advisories/CVE-2026-10754/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 17:38:01 GMTCVECVE-2026-14337: Pega Platform versions 23.1.0 through 25.1.3 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.https://agentprime.io/advisories/CVE-2026-14337/https://agentprime.io/advisories/CVE-2026-14337/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Aug 2026 13:48:40 GMTCVECVE-2026-1563: Pega Platform versions 8.1.0 through 25.1.2 are affected by an Reflected Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.https://agentprime.io/advisories/CVE-2026-1563/https://agentprime.io/advisories/CVE-2026-1563/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 16:38:21 GMTCVECVE-2026-1562: Pega Platform versions 8.1.0 through 25.1.2 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.https://agentprime.io/advisories/CVE-2026-1562/https://agentprime.io/advisories/CVE-2026-1562/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 16:37:13 GMTCVECVE-2025-62180: Pega Platform versions 8.3.0 through Infinity 25.1.2 are affected by an authorization weakness that may allow authenticated users to access certain additional data via crafted URLs.https://agentprime.io/advisories/CVE-2025-62180/https://agentprime.io/advisories/CVE-2025-62180/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Jun 2026 14:48:36 GMTCVECVE-2026-1711: Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component. Requires a high privileged user with a developer role.https://agentprime.io/advisories/CVE-2026-1711/https://agentprime.io/advisories/CVE-2026-1711/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Apr 2026 21:32:51 GMTCVECVE-2026-1564: Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a developer role.https://agentprime.io/advisories/CVE-2026-1564/https://agentprime.io/advisories/CVE-2026-1564/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Apr 2026 21:31:19 GMTCVECVE-2025-62184: Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface component.https://agentprime.io/advisories/CVE-2025-62184/https://agentprime.io/advisories/CVE-2025-62184/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Mar 2026 17:52:07 GMTCVECVE-2025-62183: Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-site Scripting vulnerability in a user interface component. Requires an administrative user and given extensive access right…https://agentprime.io/advisories/CVE-2025-62183/https://agentprime.io/advisories/CVE-2025-62183/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Feb 2026 22:53:22 GMTCVECVE-2025-62182: Pega Customer Service Framework versions 8.7.0 through 25.1.0 are affected by a Unrestricted file upload vulnerability, where a privileged user could potentially upload a malicious file.https://agentprime.io/advisories/CVE-2025-62182/https://agentprime.io/advisories/CVE-2025-62182/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Jan 2026 16:37:06 GMTCVECVE-2025-62181: Pega Platform versions 7.1.0 through Infinity 25.1.0 are affected by a User Enumeration where during user authentication process, a difference in response time could allow a remote unauthenticated us…https://agentprime.io/advisories/CVE-2025-62181/https://agentprime.io/advisories/CVE-2025-62181/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Dec 2025 20:41:08 GMTCVECVE-2025-9559: Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read datahttps://agentprime.io/advisories/CVE-2025-9559/https://agentprime.io/advisories/CVE-2025-9559/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Oct 2025 15:28:18 GMTCVECVE-2025-8681: Pega Platform versions 7.1.0 to Infinity 24.2.2 are affected by a Stored XSS issue in a user interface componenthttps://agentprime.io/advisories/CVE-2025-8681/https://agentprime.io/advisories/CVE-2025-8681/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Sep 2025 16:00:15 GMTCVECVE-2025-2161: Cross-site scripting in Pegasystems Pega Infinityhttps://agentprime.io/advisories/CVE-2025-2161/https://agentprime.io/advisories/CVE-2025-2161/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Apr 2025 14:19:37 GMTCVECVE-2025-2160: Cross-site scripting in Pegasystems Pega Infinityhttps://agentprime.io/advisories/CVE-2025-2160/https://agentprime.io/advisories/CVE-2025-2160/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Apr 2025 14:16:34 GMTCVECVE-2024-12211: Cross-site scripting in Pegasystems Pega Infinityhttps://agentprime.io/advisories/CVE-2024-12211/https://agentprime.io/advisories/CVE-2024-12211/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Jan 2025 16:14:59 GMTCVECVE-2024-10716: Cross-site scripting in Pegasystems Pega Infinityhttps://agentprime.io/advisories/CVE-2024-10716/https://agentprime.io/advisories/CVE-2024-10716/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Dec 2024 15:28:29 GMTCVECVE-2024-10094: Code injection in Pegasystems Pega Infinityhttps://agentprime.io/advisories/CVE-2024-10094/https://agentprime.io/advisories/CVE-2024-10094/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 Nov 2024 14:45:22 GMTCVEcriticalCVE-2024-6702: Injection in Pegasystems Pega Infinityhttps://agentprime.io/advisories/CVE-2024-6702/https://agentprime.io/advisories/CVE-2024-6702/CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Sep 2024 14:25:44 GMTCVECVE-2024-6701: Cross-site scripting in Pegasystems Pega Infinityhttps://agentprime.io/advisories/CVE-2024-6701/https://agentprime.io/advisories/CVE-2024-6701/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Sep 2024 14:25:28 GMTCVECVE-2024-6700: Cross-site scripting in Pegasystems Pega Infinityhttps://agentprime.io/advisories/CVE-2024-6700/https://agentprime.io/advisories/CVE-2024-6700/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Sep 2024 14:24:08 GMTCVECVE-2023-26465: Cross-site scripting in Pegasystems Pega Infinityhttps://agentprime.io/advisories/CVE-2023-26465/https://agentprime.io/advisories/CVE-2023-26465/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Jun 2023 00:00:00 GMTCVECVE-2022-35656: Cross-site request forgery in Pegasystems Pega Infinityhttps://agentprime.io/advisories/CVE-2022-35656/https://agentprime.io/advisories/CVE-2022-35656/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 22 Aug 2022 14:47:57 GMTCVECVE-2022-35655: Cross-site scripting in Pegasystems Pega Infinityhttps://agentprime.io/advisories/CVE-2022-35655/https://agentprime.io/advisories/CVE-2022-35655/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 22 Aug 2022 14:47:36 GMTCVECVE-2022-35654: Cross-site scripting in Pegasystems Pega Infinityhttps://agentprime.io/advisories/CVE-2022-35654/https://agentprime.io/advisories/CVE-2022-35654/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 22 Aug 2022 14:46:53 GMTCVECVE-2022-24083: Improper authorization in Pegasystems Pega Infinityhttps://agentprime.io/advisories/CVE-2022-24083/https://agentprime.io/advisories/CVE-2022-24083/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 25 Jul 2022 16:07:16 GMTCVEcriticalCVE-2022-24082: Deserialization of untrusted data in Pegasystems Pega Infinityhttps://agentprime.io/advisories/CVE-2022-24082/https://agentprime.io/advisories/CVE-2022-24082/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.12 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 Jul 2022 00:00:00 GMTCVEcriticalCVE-2021-27654: Weak password recovery in Pegasystems Pega Infinityhttps://agentprime.io/advisories/CVE-2021-27654/https://agentprime.io/advisories/CVE-2021-27654/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Jan 2022 19:09:31 GMTCVECVE-2021-27651: Improper authentication in Pegasystems Pega Infinityhttps://agentprime.io/advisories/CVE-2021-27651/https://agentprime.io/advisories/CVE-2021-27651/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.54 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Apr 2021 14:47:20 GMTCVEcritical