CVE-2024-12211CWE-79

Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an Stored XSS issue with profile

Medium · published January 13, 2025

CVSS v3.1
5.4
EPSS
0%
Percentile
24.4
In the wild
Unconfirmed
What it is

Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an Stored XSS issue with profile.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00326 · 24.4th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2025-01-13T16:14Z
EPSS history
Timeline
  • 13 JAN 16:14Z
    Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an Stored XSS issue with profile
    cvelistv5