Approved changes feed: RSS · Atom

cpe:2.3:a:pega:pega_platform:8.3:*:*:*:*:*:*:*

part: a version: 8.3 update: *

VendorPega (458b53cc-0bbb-5de4-a576-6c9a9d79f519)
ProductPega Platform (20b1cafe-b9eb-5897-9846-d0dbcf095abb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-16388 vulnerable 2026-06-08 05:13:08.403340 Details available
PEGA Platform 8.3.0 is vulnerable to Information disclosure via a direct prweb/sso/random_token/!STANDARD?pyStream=MyAlerts request to get Audit Log information while using a low-privilege account. NOTE: The vendor states that this vulnerability was discovered using an administrator account and they are normal administrator functions. Therefore, the claim that the CVE was done with a low privilege account is incorrect
Published: 2019-11-26T17:26:23.000Z
Updated: 2024-08-05T01:17:39.485Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16387 vulnerable 2026-06-08 05:13:08.402734 Details available
PEGA Platform 8.3.0 is vulnerable to a direct prweb/sso/random_token/!STANDARD?pyActivity=Data-Admin-DB-Name.DBSchema_ListDatabases request while using a low-privilege account. (This can perform actions and retrieve data that only an administrator should have access to.) NOTE: The vendor states that this vulnerability was discovered using an administrator account and they are normal administrator functions. Therefore, the claim that the CVE was done with a low privilege account is incorrect
Published: 2019-11-26T17:25:14.000Z
Updated: 2024-08-05T01:17:39.410Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.