Known Vulnerabilities for products from Pega
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Pega".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-14337 json | Not Provided | 2026-08-04 | 2026-08-04 | |
| CVE-2026-13761 json | Not Provided | 2026-08-28 | 2026-08-28 | |
| CVE-2026-10754 json | Not Provided | 2026-08-10 | 2026-08-11 | |
| CVE-2026-1711 json | Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface c... | Not Provided | 2026-04-15 | 2026-04-23 |
| CVE-2026-1564 json | Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Re... | Not Provided | 2026-04-15 | 2026-04-23 |
| CVE-2026-1563 json | Pega Platform versions 8.1.0 through 25.1.2 are affected by an Reflected Cross-site scripting (XSS) vulnerability in a user i... | Not Provided | 2026-07-15 | 2026-07-21 |
| CVE-2026-1562 json | Pega Platform versions 8.1.0 through 25.1.2 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user inte... | Not Provided | 2026-07-15 | 2026-07-21 |
| CVE-2025-62184 json | Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface c... | Not Provided | 2026-03-31 | 2026-07-24 |
| CVE-2025-9559 json | Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface ... | Not Provided | 2025-10-16 | 2026-10-09 |
| CVE-2025-8681 json | Pega Platform versions 7.1.0 to Infinity 24.2.2 are affected by a Stored XSS issue in a user interface component. Requires ... | Not Provided | 2025-09-10 | 2026-09-26 |
| CVE-2023-32090 json | Pega platform clients who are using versions 6.1 through 7.3.1 may be utilizing default credentials | 9.8 - CRITICAL | 2023-08-07 | 2023-08-10 |
| CVE-2023-32089 json | Pega Platform versions 8.1 to 8.8.2 are affected by an XSS issue with Pin description | 6.1 - MEDIUM | 2023-10-18 | 2023-10-25 |
| CVE-2023-32088 json | Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creation | 6.1 - MEDIUM | 2023-10-18 | 2023-10-25 |
| CVE-2023-32087 json | Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation | 6.1 - MEDIUM | 2023-10-18 | 2023-10-25 |
| CVE-2023-28094 json | Pega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a version prior to 8.x may be utilizing... | 9.8 - CRITICAL | 2023-06-22 | 2023-08-05 |
| CVE-2023-28093 json | A user with a compromised configuration can start an unsigned binary as a service. | 6.5 - MEDIUM | 2023-04-10 | 2023-04-21 |
| CVE-2023-26467 json | A man in the middle can redirect traffic to a malicious server in a compromised configuration. | 5.4 - MEDIUM | 2023-04-10 | 2023-04-21 |
| CVE-2023-26466 json | A user with non-Admin access can change a configuration file on the client to modify the Server URL. | 7.8 - HIGH | 2023-04-10 | 2023-04-14 |
| CVE-2023-26465 json | Pega Platform versions 7.2 to 8.8.1 are affected by an XSS issue. | 6.1 - MEDIUM | 2023-06-09 | 2023-06-16 |
| CVE-2023-4843 json | Pega Platform versions 7.1 to 8.8.3 are affected by an HTML Injection issue with a name field utilized in Visual Business Dir... | 4.8 - MEDIUM | 2023-09-08 | 2023-09-12 |
Known software with vulnerabilities from Pega
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Pega | Pega Platform | 5 |
| Application | Pega | Platform | 8.1.7 |