Pega: >> Pega Platform >> 8.4.0.237 Security Vulnerabilities
Pega Platform from 8.3 to 8.7.3 vulnerability may allow authenticated security administrators to alter CSRF settings directly.
CVSS Score
6.8
EPSS Score
0.001
Published
2022-08-22
pyActivity in Pega Platform 8.4.0.237 has a security misconfiguration that leads to an improper access control vulnerability via =GetWebInfo.
CVSS Score
9.8
EPSS Score
0.004
Published
2021-04-12
Pega Platform through 8.4.x is affected by Cross Site Scripting (XSS) via the ConnectionID parameter, as demonstrated by a pyActivity=Data-TRACERSettings.pzStartTracerSession request to a PRAuth URI.
CVSS Score
6.1
EPSS Score
0.002
Published
2020-12-15
Page 2