CVE-2025-2161CWE-79

Pega Platform versions 7.2.1 to Infinity 24.2.1 are affected by an XSS issue with Mashup

High · published April 14, 2025

CVSS v3.1
7.1
EPSS
0%
Percentile
19.6
In the wild
Unconfirmed
What it is

Pega Platform versions 7.2.1 to Infinity 24.2.1 are affected by an XSS issue with Mashup

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00281 · 19.6th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2025-04-14T14:19Z
EPSS history
Timeline
  • 14 APR 14:19Z
    Pega Platform versions 7.2.1 to Infinity 24.2.1 are affected by an XSS issue with Mashup
    cvelistv5