Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how pega compares to other vendors in security performance

View Risk Score →

Pega Pega PlatformPega Platform versions 23.1.0 through 25.1.3 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.

Risk 29
Severity
4.6
First published (updated )
CVE-2026-14337

Pega Pega PlatformPega Platform versions 8.1.0 through 25.1.2 are affected by an Reflected Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.

Risk 29
Severity
4.8
First published (updated )
CVE-2026-1563

Pega Pega PlatformPega Platform versions 8.1.0 through 25.1.2 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.

Risk 29
Severity
4.6
First published (updated )
CVE-2026-1562

Pegasystems Pega PlatformPega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component. Requires a high privileged user with a developer role.

Risk 29
Severity
4.8
First published (updated )
CVE-2026-1711

Pegasystems Pega PlatformPega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a developer role.

Risk 31
Severity
5.1
First published (updated )
CVE-2026-1564
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Pega Pega Robotic AutomationAn arbitrary file-write vulnerability in Pega Browser Extension (PBE) affects Pega Robotic Automation version 22.1 or R25 users who are running automations that work with Google Chrome or Microsoft Edge.

Risk 54
Severity
7.2
First published (updated )
CVE-2026-1078

Pegasystems Pega PlatformPega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface component.

Risk 21
Severity
4.8
First published (updated )
CVE-2025-62184

Pega Pega PlatformPega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-site Scripting vulnerability in a user interface component. Requires an administrative user and given extensive access rights, impact to Confidentiality and Integrity are low.

Risk 29
Severity
4.8
First published (updated )
CVE-2025-62183

Pega Customer Service FrameworkPega Customer Service Framework versions 8.7.0 through 25.1.0 are affected by a Unrestricted file upload vulnerability, where a privileged user could potentially upload a malicious file.

Risk 26
Severity
5.3
First published (updated )
CVE-2025-62182

Pega Pega PlatformPega Platform versions 7.1.0 through Infinity 25.1.0 are affected by a User Enumeration where during user authentication process, a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not.

Risk 27
Severity
5.3
First published (updated )
CVE-2025-62181
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Pega Pega PlatformPega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data

Risk 27
Severity
6.5
EPSS
0.04%
First published (updated )
CVE-2025-9559

Pega Pega PlatformPega Platform versions 7.1.0 to Infinity 24.2.2 are affected by a Stored XSS issue in a user interface component

Risk 29
Severity
5.5
EPSS
0.04%
First published (updated )
CVE-2025-8681

Pega Pega PlatformXSS

Risk 47
Severity
7.1
First published (updated )
CVE-2025-2161

Pega Pega PlatformXSS

Risk 59
Severity
8.1
First published (updated )
CVE-2025-2160

Pega Pega PlatformXSS

Risk 34
Severity
5.4
First published (updated )
CVE-2024-12211
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Pega InfinityXSS

Risk 41
Severity
5.9
First published (updated )
CVE-2024-10716

Pega InfinityCode Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2024-10094

PEGA InfinityXSS

Risk 36
Severity
5.2
First published (updated )
CVE-2024-6702

PEGA InfinityXSS

Risk 39
Severity
5.5
First published (updated )
CVE-2024-6701

PEGA InfinityXSS

Risk 39
Severity
5.5
First published (updated )
CVE-2024-6700
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Pega Pega PlatformXEE

Risk 44
Severity
7.7
First published (updated )
CVE-2023-50168

Pega Pega PlatformXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2023-50167

Pega PlatformXSS

Risk 27
Severity
6.1
EPSS
0.05%
First published (updated )
CVE-2023-50166

Pega PlatformSSRF

Risk 34
Severity
8.6
EPSS
0.09%
First published (updated )
CVE-2023-50165

Pega PlatformXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2023-32089
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Pega PlatformXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2023-32088

Pega PlatformXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2023-32087

Pega Pega PlatformXSS

Risk 29
Severity
4.8
First published (updated )
CVE-2023-4843

Pega Pega PlatformPega platform clients who are using versions 6.1 through 7.3.1 may be utilizing default credentials

Risk 86
Severity
9.8
First published (updated )
CVE-2023-32090

Pega Pega PlatformPega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a version prio…

Risk 86
Severity
9.8
First published (updated )
CVE-2023-28094
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203