Vulnerabilities > Pega > Platform > High

DATE CVE VULNERABILITY TITLE RISK
2024-01-31 CVE-2023-50165 Server-Side Request Forgery (SSRF) vulnerability in Pega Platform
Pega Platform versions 8.2.1 to Infinity 23.1.0 are affected by an Generated PDF issue that could expose file contents.
network
low complexity
pega CWE-918
8.6
2020-08-13 CVE-2019-16374 Unspecified vulnerability in Pega Platform 8.1.7/8.1.8/8.2.1
Pega Platform 8.2.1 allows LDAP injection because a username can contain a * character and can be of unlimited length.
network
low complexity
pega
7.5