CVE-2023-32087

Description

References

• support.pega.com/support-doc/pega-security-advisory-e23-vulnerability-remediation-note · Vendor Advisory

Weitere Schwachstellen in platform

• CVE-2023-50166MITTEL 6.1Pega Platform from 8.5.4 to 8.8.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter.
• CVE-2023-50165HOCH 8.6Pega Platform versions 8.2.1 to Infinity 23.1.0 are affected by an Generated PDF issue that could expose file contents.
• CVE-2023-32089MITTEL 6.1 Pega Platform versions 8.1 to 8.8.2 are affected by an XSS issue with Pin description
• CVE-2023-32088MITTEL 6.1 Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creation
• CVE-2019-16374KRITISCH 9.8Pega Platform 8.2.1 allows LDAP injection because a username can contain a * character and can be of unlimited length. An attacker can speci…