CVE-2024-10716CWE-79

Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an XSS issue with search

Medium · published December 5, 2024

CVSS v3.1
5.9
EPSS
0%
Percentile
11.4
In the wild
Unconfirmed
What it is

Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an XSS issue with search.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00215 · 11.4th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2024-12-05T15:28Z
EPSS history
Timeline
  • 05 DEC 15:28Z
    Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an XSS issue with search
    cvelistv5