CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 中危4.8 |
Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a developer role. |
| 15/04/2026 |
| CVE-2025-62184 | 低危3.4 | Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface component. Requires an administrative user and given extensive access rights, impact to Confidentiality is low and Integrity is none. | 31/03/2026 |
| CVE-2025-9559 | 中危6.5 | Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data. | 16/10/2025 |
| CVE-2025-8681 | 中危5.4 | Pega Platform versions 7.1.0 to Infinity 24.2.2 are affected by a Stored XSS issue in a user interface component. Requires a high privileged user with a developer role. | 10/09/2025 |
| CVE-2025-2161 | 中危6.1 | Pega Platform versions 7.2.1 to Infinity 24.2.1 are affected by an XSS issue with Mashup | 14/04/2025 |
| CVE-2025-2160 | 中危6.1 | Pega Platform versions 8.4.3 to Infinity 24.2.1 are affected by an XSS issue with Mashup | 14/04/2025 |
| CVE-2024-12211 | 中危5.4 | Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an Stored XSS issue with profile. | 13/01/2025 |
| CVE-2024-10716 | 中危4.8 | Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an XSS issue with search. | 05/12/2024 |
| CVE-2024-10094 | 严重9.8 | Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code | 20/11/2024 |
| CVE-2024-6702 | 中危4.8 | Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage. | 12/09/2024 |
| CVE-2024-6701 | 中危4.8 | Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with case type. | 12/09/2024 |
| CVE-2024-6700 | 中危4.8 | Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with App name. | 12/09/2024 |
| CVE-2023-50168 | 高危7.7 | Pega Platform from 6.x to 8.8.4 is affected by an XXE issue with PDF Generation. | 14/03/2024 |
| CVE-2023-50167 | 中危6.1 | Pega Platform from 7.1.7 to 23.1.1 is affected by an XSS issue with editing/rendering user html content. | 06/03/2024 |
| CVE-2023-50166 | 中危6.1 | Pega Platform from 8.5.4 to 8.8.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter. | 31/01/2024 |
| CVE-2023-50165 | 高危8.6 | Pega Platform versions 8.2.1 to Infinity 23.1.0 are affected by an Generated PDF issue that could expose file contents. | 31/01/2024 |
| CVE-2023-32089 | 中危6.1 |
Pega Platform versions 8.1 to 8.8.2 are affected by an XSS issue with Pin description
| 18/10/2023 |