CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2023-32087 | MÉDIO6.1 |
Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation
| 18/10/2023 |
| CVE-2019-16374 | CRÍTICO9.8 | Pega Platform 8.2.1 allows LDAP injection because a username can contain a * character and can be of unlimited length. An attacker can specify four characters of a username, followed by the * character, to bypass access control. | 13/08/2020 |
| CVE-2020-8775 | ALTO8.9 | Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the comment tags. | 29/04/2020 |
| CVE-2020-8773 | ALTO8.9 | The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability. | 29/04/2020 |