Pegasystems vulnerabilities
46 CVEs and advisories name Pegasystems as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-32088 Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creation
- CVE-2023-32087 Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation
- CVE-2023-4843Pega Platform versions 7.1 to 8.8.3 are affected by an HTML Injection issue with a name field utilized in Visual Business Director, however
- CVE-2023-32090Pega platform clients who are using versions 6.1 through 7.3.1 may be utilizing default credentials
- CVE-2023-28094Pega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a version prior to 8.x may be utilizing default creden
- CVE-2023-26465Pega Platform versions 7.2 to 8.8.1 are affected by an XSS issue.
- CVE-2023-28093A user with a compromised configuration can start an unsigned binary as a service.
- CVE-2023-26467A man in the middle can redirect traffic to a malicious server in a compromised configuration.
- CVE-2023-26466A user with non-Admin access can change a configuration file on the client to modify the Server URL.
- CVE-2022-35656Pega Platform from 8.3 to 8.7.3 vulnerability may allow authenticated security administrators to alter CSRF settings directly.
- CVE-2022-35655Pega Platform from 7.3 to 8.7.3 is affected by an XSS issue due to a misconfiguration of a datapage setting.
- CVE-2022-35654Pega Platform from 8.5.4 to 8.7.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter.
- CVE-2022-24083Password authentication bypass vulnerability for local accounts can be used to bypass local authentication checks.
- CVE-2022-24082If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Internet and port filter
- CVE-2021-27654Forgotten password reset functionality for local accounts can be used to bypass local authentication checks.
- CVE-2021-27651In versions 8.2.1 through 8.5.2 of Pega Infinity, the password reset functionality for local accounts can be used to bypass local authentica