Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2025-62184

Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface component.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Pega

Description

Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface component. Requires an administrative user and given extensive access rights, impact to Confidentiality is low and Integrity is none.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Pegasystems Pega Infinity

Default version status: unaffected

  • 8.1.0 to < Infinity 25.1.0affected

References