CVE-2023-50168High 7.7Pega Platform from 6.x to 8.8.4 is affected by an XXE issue with PDF Generation.0.4%
CVE-2023-50167Medium 5.4Pega Platform from 7.1.7 to 23.1.1 is affected by an XSS issue with editing/rendering user html content.0.3%
CVE-2023-50166Medium 6.1Pega Platform from 8.5.4 to 8.8.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter.0.3%
CVE-2023-50165High 8.5Pega Platform versions 8.2.1 to Infinity 23.1.0 are affected by an Generated PDF issue that could expose file contents.0.3%
CVE-2023-32089Medium 4.6
Pega Platform versions 8.1 to 8.8.2 are affected by an XSS issue with Pin description
0.3%
CVE-2023-32088Medium 4.6
Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creation
0.3%
CVE-2023-32087Medium 4.6
Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation
0.3%
CVE-2023-4843Medium 4.3Pega Platform versions 7.1 to 8.8.3 are affected by an HTML Injection issue with a name field utilized in Visual Business Director, however this field can only be modified by an authenticated administ0.3%
CVE-2023-32090Critical 9.8Pega platform clients who are using versions 6.1 through 7.3.1 may be
utilizing default credentials
0.6%
CVE-2023-28094High 8.1Pega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a version prior to 8.x may be utilizing default credentials.0.5%