CMS

Pega Infinity

Pega Infinity is a unified platform by Pegasystems that combines customer engagement and digital process automation (DPA) capabilities. It leverages AI to anticipate customer needs automate processes and deliver personalized experiences across various channels. Pega Infinity also includes a low-code application development environment (Pega Platform) for building and deploying applications

Official Site:

https://www.pega.com/infinity

Severity Summary:

Critical: 4 High: 1 Medium: 5

Reference

Title

Severity

CVE-2022-24083

Pega Infinity Other Vulnerability

Critical

CVE-2022-24082

Pega Infinity Deserialization of Untrusted Data Vulnerability

Critical

CVE-2024-10094

Pega Infinity Improper Control of Generation of Code (Code Injection) Vulnerability

Critical

CVE-2021-27651

Pega Infinity Improper Authentication Vulnerability

Critical

CVE-2021-27654

Pega Infinity Weak Password Recovery Mechanism for Forgotten Password Vulnerability

High

CVE-2024-10716

Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2021-27653

Pega Infinity Vulnerability

Medium

CVE-2024-6701

Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2024-6700

Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2024-6702

Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium