CVE-2022-35654

Pega Platform from 8.5.4 to 8.7.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter.

Score

CVSS 3.1 6.1 Medium

Status

Modified - security@pega.com

Published

2022-08-22

Last modified

2024-08-03

Weaknesses

CWE-79

Affected products

• Pega Platform (Pega)
• Pega Infinity (Pegasystems)

References

• https://support.pega.com/support-doc/pega-security-advisory-d22-e22-f22-vulnerabilities-%E2%80%93-hotfix-matrix