Vulnerabilities > Pega > Platform > High
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2024-01-31 | CVE-2023-50165 | Server-Side Request Forgery (SSRF) vulnerability in Pega Platform Pega Platform versions 8.2.1 to Infinity 23.1.0 are affected by an Generated PDF issue that could expose file contents. | 8.6 |
2020-08-13 | CVE-2019-16374 | Unspecified vulnerability in Pega Platform 8.1.7/8.1.8/8.2.1 Pega Platform 8.2.1 allows LDAP injection because a username can contain a * character and can be of unlimited length. | 7.5 |