pyActivity in Pega Platform 8.4.0.237 has a security misconfiguration that leads to an improper access control vulnerability via =GetWebInfo.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HPega Platform
APPPega8.4.0.237
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2023-32090CRITICAL9.8PL ✓same product
Pega Platform – domyślne dane uwierzytelniające umożliwiają obejście autoryzacji
CVE-2025-2161HIGH7.1same product
Pega Platform versions 7.2.1 to Infinity 24.2.1 are affected by an XSS issue with Mashup
CVE-2025-2160HIGH8.1same product
Pega Platform versions 8.4.3 to Infinity 24.2.1 are affected by an XSS issue with Mashup
CVE-2023-50168HIGH7.7same product
Pega Platform from 6.x to 8.8.4 is affected by an XXE issue with PDF Generation.
CVE-2023-28094HIGH8.1same product
Pega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a version prior to 8.x m...