CVE-2025-8681

Pega Platform versions 7.1.0 to Infinity 24.2.2 are affected by a Stored XSS issue in a user interface component.  Requires a high privileged user with a developer role.

Score

CVSS 3.1 5.5 Medium

Status

Analyzed - security@pega.com

Published

2025-09-10

Last modified

2025-09-11

Weaknesses

CWE-79

Affected products

• Pega Platform (Pega)
• Pega Infinity (Pegasystems)

References

• https://support.pega.com/support-doc/pega-security-advisory-g25-vulnerability-remediation-note