Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 12

Export CSV
CVE-2026-1563

Pega Platform versions 8.1.0 through 25.1.2 are affected by an Reflected Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.

Pega Platform versions 8.1.0 through 25.1.2 are affected by an Reflected Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Pega Pegasystems
Products
Pega Platform Pega Infinity
CVE-2026-1562

Pega Platform versions 8.1.0 through 25.1.2 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.

Pega Platform versions 8.1.0 through 25.1.2 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Pega Pegasystems
Products
Pega Platform Pega Infinity
CVE-2026-1564

Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a developer role.

Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a developer role.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Pega Pegasystems
Products
Pega Platform Pega Infinity
CVE-2026-1711

Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component. Requires a high privileged user with a developer role.

Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component. Requires a high privileged user with a developer role.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Pega Pegasystems
Products
Pega Platform Pega Infinity
CVE-2025-62184

Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface component.

Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface component. Requires an administrative user and given extensive access rights, impact to Confidentiality is low and Integrity is none.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Pega Pegasystems
Products
Pega Platform Pega Infinity
CVE-2025-9559

Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data

Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Pega Pegasystems
Products
Pega Platform Pega Infinity
CVE-2025-8681

Pega Platform versions 7.1.0 to Infinity 24.2.2 are affected by a Stored XSS issue in a user interface component

Pega Platform versions 7.1.0 to Infinity 24.2.2 are affected by a Stored XSS issue in a user interface component.  Requires a high privileged user with a developer role.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Pega Pegasystems
Products
Pega Platform Pega Infinity