high
Pega Platform: Cross-site scripting possible
CERT-Bund (BSI) reports one vulnerability in Pega Platform with severity high. The stated impact is cross-site scripting. The full description, affected versions and recommended action are available from CERT-Bund (BSI).
- Attack vector
- over the network
What this means for you
Attackers can run code in your users' browsers. This mainly affects publicly reachable portals and login forms, where sessions can be taken over.
All 3 advisories for Pega Platform
Original source
Insights
More articles
Weekly situation, week 45: 61 advisories, 5 critical
Between 1 Nov and 8 Nov 2026 our sources recorded 61 advisories: 5 critical, 56 high.
Weekly situation, week 44: 60 advisories, 2 critical
Between 25 Oct and 1 Nov 2026 our sources recorded 60 advisories: 2 critical, 58 high.
Weekly situation, week 43: 86 advisories, 11 critical
Between 18 Oct and 25 Oct 2026 our sources recorded 86 advisories: 11 critical, 75 high.
Contact
Reputation takes years. Destruction takes seconds.
Talk to us before somebody else does. The first conversation is free and we reply the same business day.