Vulnerabilities > Pega > Pega Platform > 8.3

DATE CVE VULNERABILITY TITLE RISK
2019-11-26 CVE-2019-16386 Forced Browsing vulnerability in Pega Platform
PEGA Platform 7.x and 8.x is vulnerable to Information disclosure via a direct prweb/sso/random_token/!STANDARD?pyActivity=GetWebInfo&target=popup&pzHarnessID=random_harness_id request to get database schema information while using a low-privilege account.
network
low complexity
pega CWE-425
4.3