← Back to home
wid-sec-w-2026-0941  ·  Published 2026-03-31  ·  View on BSI CERT-Bund ↗

Pega Platform: Vulnerability allows Cross-Site Scripting

CVSS 4.8 MEDIUM

Risk Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Pega Platform ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

CVEs (1)

Affected Vendors

Pega

Affected Products (6)

Pega · Platform <24.1.4
Pega · Platform 24.1.4
Pega · Platform <24.2.4
Pega · Platform 24.2.4
Pega · Platform <25.1.0
Pega · Platform 25.1.0

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more