Veille CVE

Recherche « Pegasystems Pega Infinity »

6 CVE

Critique 0 Élevée 3 Moyenne 3 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Pegasystems Pega Infinity » ✕
  1. CVE-2026-13761 8.8 Élevée

    Pegasystems Pega Infinity

    Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping.

  2. CVE-2026-10754 8.6 Élevée

    Pegasystems Pega Infinity

    Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls.

  3. CVE-2026-14337 4.6 Moyenne

    Pegasystems Pega Infinity

    Pega Platform versions 23.1.0 through 25.1.3 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.

  4. CVE-2026-1563 4.8 Moyenne

    Pegasystems Pega Infinity · Pega pega platform

    Pega Platform versions 8.1.0 through 25.1.2 are affected by an Reflected Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.

  5. CVE-2026-1562 4.8 Moyenne

    Pegasystems Pega Infinity · Pega pega platform

    Pega Platform versions 8.1.0 through 25.1.2 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.

  6. CVE-2025-62180 7.1 Élevée

    Pegasystems Pega Infinity

    Pega Platform versions 8.3.0 through Infinity 25.1.2 are affected by an authorization weakness that may allow authenticated users to access certain additional data via crafted URLs.