CVE-2025-62180CWE-639

CVE-2025-62180

published June 23, 2026

CVSS
7.1
EPSS
0%
Percentile
29.1
In the wild
Unconfirmed
What it is

Pega Platform versions 8.3.0 through Infinity 25.1.2 are affected by an authorization weakness that may allow authenticated users to access certain additional data via crafted URLs.

The record
Technical detail
CVSS
7.1 · NONE
CVSS v4.0
Not supplied
EPSS
0.00364 · 29.1th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2026-06-23T20:16Z
References (2)
https://support.pega.com/support-doc/pega-security-advisory-h26-vulnerability-remediation-note · [email protected]https://support.pega.com/support-doc/pega-security-advisory-i25-vulnerability-remediation-note · [email protected]
EPSS history
Timeline
  • 23 JUN 14:48Z
    Pega Platform versions 8.3.0 through Infinity 25.1.2 are affected by an authorization weakness that may allow authenticated users to access certain additional data via crafted URLs.
    cvelistv5