Vulnerabilities > Pega > Platform > 8.2.3
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-01-31 | CVE-2023-50165 | Server-Side Request Forgery (SSRF) vulnerability in Pega Platform Pega Platform versions 8.2.1 to Infinity 23.1.0 are affected by an Generated PDF issue that could expose file contents. | 8.6 |
| 2023-10-18 | CVE-2023-32087 | Cross-site Scripting vulnerability in Pega Platform Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation | 6.1 |
| 2023-10-18 | CVE-2023-32088 | Cross-site Scripting vulnerability in Pega Platform Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creation | 6.1 |
| 2023-10-18 | CVE-2023-32089 | Cross-site Scripting vulnerability in Pega Platform Pega Platform versions 8.1 to 8.8.2 are affected by an XSS issue with Pin description | 6.1 |
| 2020-04-29 | CVE-2020-8775 | Cross-site Scripting vulnerability in Pega Platform Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the comment tags. | 8.9 |
| 2020-04-29 | CVE-2020-8773 | Cross-site Scripting vulnerability in Pega Platform The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability. | 8.9 |