Advisories · Technology
Pegasystems Pega Platform.
Every CVE that names Pegasystems Pega Platform among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.7 High
XML external entity injection in Pegasystems Pega Platform
- Pegasystems Pega Platform
- XML external entities (XXE)
- CVSS 5.4 Medium
Cross-site scripting in Pegasystems Pega Platform
- Pegasystems Pega Platform
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Cross-site scripting in Pegasystems Pega Platform
- Pegasystems Pega Platform
- Cross-site scripting (XSS)
- CVSS 8.5 High
Server-side request forgery in Pegasystems Pega Platform
- Pegasystems Pega Platform
- Server-side request forgery (SSRF)
- CVSS 4.6 Medium
Cross-site scripting in Pegasystems Pega Platform
- Pegasystems Pega Platform
- Cross-site scripting (XSS)
- CVSS 4.6 Medium
Cross-site scripting in Pegasystems Pega Platform
- Pegasystems Pega Platform
- Cross-site scripting (XSS)
- CVSS 4.6 Medium
Cross-site scripting in Pegasystems Pega Platform
- Pegasystems Pega Platform
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Injection in Pegasystems Pega Platform
- Pegasystems Pega Platform
- Other injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Pega platform clients who are using versions 6.1 through 7.3.1 may be utilizing default credentials
- Pegasystems Pega Platform
- CWE-1393
- CVSS 8.1 High
Pegasystems Pega Platform: Pega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a…
- Pegasystems Pega Platform
- CWE-1393