Vulnerabilities > Pega > Pega Platform > 7.1.8
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-03-14 | CVE-2023-50168 | XXE vulnerability in Pega Platform Pega Platform from 6.x to 8.8.4 is affected by an XXE issue with PDF Generation. | 7.7 |
| 2024-03-06 | CVE-2023-50167 | Cross-site Scripting vulnerability in Pega Platform Pega Platform from 7.1.7 to 23.1.1 is affected by an XSS issue with editing/rendering user html content. | 6.1 |
| 2023-09-08 | CVE-2023-4843 | Cross-site Scripting vulnerability in Pega Platform Pega Platform versions 7.1 to 8.8.3 are affected by an HTML Injection issue with a name field utilized in Visual Business Director, however this field can only be modified by an authenticated administrative user. | 4.8 |
| 2023-08-07 | CVE-2023-32090 | Improper Authentication vulnerability in Pega Platform Pega platform clients who are using versions 6.1 through 7.3.1 may be utilizing default credentials | 9.8 |
| 2023-06-22 | CVE-2023-28094 | Unspecified vulnerability in Pega Platform Pega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a version prior to 8.x may be utilizing default credentials. | 9.8 |
| 2020-11-09 | CVE-2020-24353 | Cross-site Scripting vulnerability in Pega Platform Pega Platform before 8.4.0 has a XSS issue via stream rule parameters used in the request header. | 6.1 |
| 2020-04-29 | CVE-2020-8774 | Cross-site Scripting vulnerability in Pega Platform Pega Platform before version 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the "ActionStringID" function. | 8.8 |
| 2019-11-26 | CVE-2019-16386 | Forced Browsing vulnerability in Pega Platform PEGA Platform 7.x and 8.x is vulnerable to Information disclosure via a direct prweb/sso/random_token/!STANDARD?pyActivity=GetWebInfo&target=popup&pzHarnessID=random_harness_id request to get database schema information while using a low-privilege account. | 4.3 |
| 2018-02-27 | CVE-2017-17478 | Cross-site Scripting vulnerability in Pega Platform An XSS issue was discovered in Designer Studio in Pegasystems Pega Platform 7.1.7, 7.1.8, 7.1.9, 7.1.10, 7.2, 7.2.1, and 7.2.2. | 4.8 |
| 2017-08-02 | CVE-2017-11356 | Information Exposure vulnerability in Pega Platform The application distribution export functionality in PEGA Platform 7.2 ML0 and earlier allows remote authenticated users with certain privileges to obtain sensitive configuration information by leveraging a missing access control. | 6.5 |