Vulnerabilities > Pega > Platform > High

DATE CVE VULNERABILITY TITLE RISK
2024-01-31 CVE-2023-50165 Server-Side Request Forgery (SSRF) vulnerability in Pega Platform
Pega Platform versions 8.2.1 to Infinity 23.1.0 are affected by an Generated PDF issue that could expose file contents.
network
low complexity
pega CWE-918
8.6
2020-04-29 CVE-2020-8775 Cross-site Scripting vulnerability in Pega Platform
Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the comment tags.
network
low complexity
pega CWE-79
8.9
2020-04-29 CVE-2020-8773 Cross-site Scripting vulnerability in Pega Platform
The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability.
network
low complexity
pega CWE-79
8.9