RSS   Podatności dla 'Pega platform'   RSS

2020-12-15
 
CVE-2020-23957

CWE-79
 
 
Pega Platform through 8.4.x is affected by Cross Site Scripting (XSS) via the ConnectionID parameter, as demonstrated by a pyActivity=Data-TRACERSettings.pzStartTracerSession request to a PRAuth URI.

 
2020-11-09
 
CVE-2020-24353

CWE-79
 
 
Pega Platform before 8.4.0 has a XSS issue via stream rule parameters used in the request header.

 
2017-08-02
 
CVE-2017-11356

 
 
The application distribution export functionality in PEGA Platform 7.2 ML0 and earlier allows remote authenticated users with certain privileges to obtain sensitive configuration information by leveraging a missing access control.

 
 
CVE-2017-11355

 
 
Multiple cross-site scripting (XSS) vulnerabilities in PEGA Platform 7.2 ML0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to the main page; the (2) beanReference parameter to the JavaBean viewer page; or the (3) pyTableName to the System database schema modification page.

 

 >>> Vendor: PEGA 3 Produkty
Pega platform
Infinity
Platform

Copyright 2024, cxsecurity.com

 

Back to Top