Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

CMS

Pega Infinity

Pega Infinity is a unified platform by Pegasystems that combines customer engagement and digital process automation (DPA) capabilities. It leverages AI to anticipate customer needs automate processes and deliver personalized experiences across various channels. Pega Infinity also includes a low-code application development environment (Pega Platform) for building and deploying applications

Official Site:

https://www.pega.com/infinity

Severity Summary:

Critical: 7 High: 10 Medium: 25
Reference
Title
Severity
CVE-2019-16388
Pega Infinity Direct Request (Forced Browsing) Vulnerability
Medium
CVE-2020-23957
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-24353
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-35654
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-35655
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-35656
Pega Infinity Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2023-26465
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2023-50167
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2023-4843
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-6702
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-6700
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-10716
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium