CVE-2025-2160

Pega Platform versions 8.4.3 to Infinity 24.2.1 are affected by an XSS issue with Mashup

Score

CVSS 3.1 8.1 High

Status

Analyzed - security@pega.com

Published

2025-04-14

Last modified

2025-04-14

Weaknesses

CWE-79

Affected products

• Pega Platform (Pega)
• Pega Infinity (Pegasystems)

References

• https://support.pega.com/support-doc/pega-security-advisory-d25-vulnerability-remediation-note