| CVE-2026-1563 | MÉDIO4.8 | Pega Platform versions 8.1.0 through 25.1.2 are affected by an Reflected Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role. | 15/07/2026 |
| CVE-2026-1562 | MÉDIO4.8 | Pega Platform versions 8.1.0 through 25.1.2 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role. | 15/07/2026 |
| CVE-2026-1711 | MÉDIO4.8 | Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component. Requires a high privileged user with a developer role. | 15/04/2026 |
| CVE-2026-1564 | MÉDIO4.8 | Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a developer role. | 15/04/2026 |
| CVE-2025-62184 | BAIXO3.4 | Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface component. Requires an administrative user and given extensive access rights, impact to Confidentiality is low and Integrity is none. | 31/03/2026 |
| CVE-2025-9559 | MÉDIO6.5 | Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data. | 16/10/2025 |
| CVE-2025-8681 | MÉDIO5.4 | Pega Platform versions 7.1.0 to Infinity 24.2.2 are affected by a Stored XSS issue in a user interface component. Requires a high privileged user with a developer role. | 10/09/2025 |
| CVE-2025-2161 | MÉDIO6.1 | Pega Platform versions 7.2.1 to Infinity 24.2.1 are affected by an XSS issue with Mashup | 14/04/2025 |
| CVE-2025-2160 | MÉDIO6.1 | Pega Platform versions 8.4.3 to Infinity 24.2.1 are affected by an XSS issue with Mashup | 14/04/2025 |
| CVE-2024-12211 | MÉDIO5.4 | Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an Stored XSS issue with profile. | 13/01/2025 |
| CVE-2024-10716 | MÉDIO4.8 | Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an XSS issue with search. | 05/12/2024 |
| CVE-2024-10094 | CRÍTICO9.8 | Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code | 20/11/2024 |
| CVE-2024-6702 | MÉDIO4.8 | Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage. | 12/09/2024 |
| CVE-2024-6701 | MÉDIO4.8 | Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with case type. | 12/09/2024 |
| CVE-2024-6700 | MÉDIO4.8 | Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with App name. | 12/09/2024 |
| CVE-2023-50168 | ALTO7.7 | Pega Platform from 6.x to 8.8.4 is affected by an XXE issue with PDF Generation. | 14/03/2024 |
| CVE-2023-50167 | MÉDIO6.1 | Pega Platform from 7.1.7 to 23.1.1 is affected by an XSS issue with editing/rendering user html content. | 06/03/2024 |
| CVE-2023-50166 | MÉDIO6.1 | Pega Platform from 8.5.4 to 8.8.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter. | 31/01/2024 |
| CVE-2023-50165 | ALTO8.6 | Pega Platform versions 8.2.1 to Infinity 23.1.0 are affected by an Generated PDF issue that could expose file contents. | 31/01/2024 |
| CVE-2023-32089 | MÉDIO6.1 |
Pega Platform versions 8.1 to 8.8.2 are affected by an XSS issue with Pin description
| 18/10/2023 |