Pega Infinity vulnerabilities

• pega infinity, pegasystems pega infinity +1 more Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an XSS issue with search. CVE-2024-10716 5.9 MediumDecember 5, 2024
• pega infinity, pegasystems pega infinity +1 more Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of... CVE-2024-10094 9.1 CriticalNovember 20, 2024
• pega infinity, pegasystems pega infinity +1 more Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage. CVE-2024-6702 5.2 MediumSeptember 12, 2024
• pega infinity, pegasystems pega infinity +1 more Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with case type. CVE-2024-6701 5.5 MediumSeptember 12, 2024
• pega infinity, pegasystems pega infinity +1 more Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with App name. CVE-2024-6700 5.5 MediumSeptember 12, 2024
• pega infinity, pegasystems pega infinity +1 more Password authentication bypass vulnerability for local accounts can be used to bypass local... CVE-2022-24083 9.8 CriticalJuly 25, 2022
• pega infinity, pegasystems pega infinity +1 more If an on-premise installation of the Pega Platform is configured with the port for the JMX... CVE-2022-24082 Public exploit EPSS 12.2% 9.8 CriticalJuly 19, 2022
• pega infinity, pegasystems pega infinity +1 more Forgotten password reset functionality for local accounts can be used to bypass local... CVE-2021-27654 8.8 HighJanuary 28, 2022
• pega infinity, pegasystems pega infinity +1 more In versions 8.2.1 through 8.5.2 of Pega Infinity, the password reset functionality for local... CVE-2021-27651 Public exploit EPSS 53.8% 9.8 CriticalApril 29, 2021
• pega infinity, pegasystems pega infinity +1 more Misconfiguration of the Pega Chat Access Group portal in Pega platform 7.4.0 - 8.5.x could lead... CVE-2021-27653 6.6 MediumApril 1, 2021