Approved changes feed: RSS · Atom

cpe:2.3:a:pega:pega_platform:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPega (458b53cc-0bbb-5de4-a576-6c9a9d79f519)
ProductPega Platform (20b1cafe-b9eb-5897-9846-d0dbcf095abb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1711 vulnerable 2026-06-08 07:49:09.437877 Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component. Requires a high privileged user with a developer role.
Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component. Requires a high privileged user with a developer role.
Published: 2026-04-15T21:32:51.821Z
Updated: 2026-04-16T14:17:53.761Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1564 vulnerable 2026-06-08 07:49:08.906488 Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a developer role.
Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a developer role.
Published: 2026-04-15T21:31:19.982Z
Updated: 2026-04-16T14:16:54.925Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9559 vulnerable 2026-06-08 07:45:22.647270 Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data
MEDIUM (6.5)
Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data.
Published: 2025-10-16T15:28:18.504Z
Updated: 2025-10-16T18:13:47.670Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8681 vulnerable 2026-06-08 07:45:20.902612 Pega Platform versions 7.1.0 to Infinity 24.2.2 are affected by a Stored XSS issue in a user interface component
MEDIUM (5.5)
Pega Platform versions 7.1.0 to Infinity 24.2.2 are affected by a Stored XSS issue in a user interface component.  Requires a high privileged user with a developer role.
Published: 2025-09-10T16:00:15.062Z
Updated: 2025-09-11T14:42:58.353Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62184 vulnerable 2026-06-08 07:37:28.759939 Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface component.
Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface component. Requires an administrative user and given extensive access rights, impact to Confidentiality is low and Integrity is none.
Published: 2026-03-31T17:52:07.404Z
Updated: 2026-03-31T18:33:01.304Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2161 vulnerable 2026-06-08 07:16:56.090038 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2160 vulnerable 2026-06-08 07:16:56.085987 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12211 vulnerable 2026-06-08 06:23:51.451637 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50168 vulnerable 2026-06-08 06:16:15.605097 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50167 vulnerable 2026-06-08 06:16:15.602720 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4843 vulnerable 2026-06-08 06:16:14.719008 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32090 vulnerable 2026-06-08 06:04:44.917183 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28094 vulnerable 2026-06-08 06:01:09.648601 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26465 vulnerable 2026-06-08 05:57:39.761372 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35656 vulnerable 2026-06-08 05:46:05.090003 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35655 vulnerable 2026-06-08 05:46:05.089528 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35654 vulnerable 2026-06-08 05:46:05.089097 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8774 vulnerable 2026-06-08 05:27:19.663423 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-24353 vulnerable 2026-06-08 05:22:32.832380 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-23957 vulnerable 2026-06-08 05:22:32.214056 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16386 vulnerable 2026-06-08 05:13:08.401147 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11356 vulnerable 2026-06-08 05:08:37.351664 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11355 vulnerable 2026-06-08 05:08:37.351256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.