Pega Platform
Vendor:
First CVE: Aug 2, 2017 · Active for 8 years
34
Total CVEs
More Total CVEs than 96% of tracked products
3.4
Avg CVEs / Year
Higher CVE frequency than 82% of tracked products
6.2
Avg CVSS
Higher Avg CVSS than 25% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Pega Platform over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 2, 2017
8 years ago
Most Recent CVE
Jul 15, 2026
10 days ago
CVE Severity & Scoring
Pega Platform34 CVEs
76%
12%
9%
All CVEs352,708 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local0 (0.0%)
Network34 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low34 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None11 (32.4%)
Unknown0 (0.0%)
Required23 (67.6%)
Privileges Required
Low8 (23.5%)
High8 (23.5%)
None18 (52.9%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (34 CVEs).
34 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-8774HIGH Pega Platform before version 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the "ActionStringID" function. | Apr 29, 2020 | 8.8 | 28 | NO | NO |
CVE-2017-11355MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in PEGA Platform 7.2 ML0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to the | Aug 2, 2017 | 6.1 | 28 | NO | YES |
CVE-2017-11356MEDIUM The application distribution export functionality in PEGA Platform 7.2 ML0 and earlier allows remote authenticated users with certain privileges to obtain sensitive configuration i | Aug 2, 2017 | 6.5 | 27 | NO | YES |
CVE-2023-32090CRITICAL Pega platform clients who are using versions 6.1 through 7.3.1 may be
utilizing default credentials
| Aug 7, 2023 | 9.8 | 26 | NO | NO |
CVE-2023-28094CRITICAL Pega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a version prior to 8.x may be utilizing default credentials. | Jun 22, 2023 | 9.8 | 26 | NO | NO |
CVE-2026-1563MEDIUM Pega Platform versions 8.1.0 through 25.1.2 are affected by an Reflected Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user wit | Jul 15, 2026 | 4.8 | 24 | NO | NO |
CVE-2026-1562MEDIUM Pega Platform versions 8.1.0 through 25.1.2 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a | Jul 15, 2026 | 4.8 | 24 | NO | NO |
CVE-2020-15390CRITICAL pyActivity in Pega Platform 8.4.0.237 has a security misconfiguration that leads to an improper access control vulnerability via =GetWebInfo. | Apr 12, 2021 | 9.8 | 24 | NO | NO |
CVE-2025-9559MEDIUM Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data. | Oct 16, 2025 | 6.5 | 23 | NO | NO |
CVE-2019-16387HIGH PEGA Platform 8.3.0 is vulnerable to a direct prweb/sso/random_token/!STANDARD?pyActivity=Data-Admin-DB-Name.DBSchema_ListDatabases request while using a low-privilege account. (Th | Nov 26, 2019 | 8.1 | 23 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (34 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
2 CVEs
5.9% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (34 CVEs).
Media Mentions
Signals from CVEs in this product scope (34 CVEs).
Top CNAs Publishing CVEs For Pega Platform
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 8.4.0.237 | 1 | 9.8 | 1.4% | 0 | 0 |
| 8.3 | 2 | 6.2 | 0.9% | 0 | 0 |
| 7.2.2 | 1 | 4.8 | 0.5% | 0 | 0 |
| 7.2.1 | 1 | 4.8 | 0.5% | 0 | 0 |
| 7.2 | 1 | 4.8 | 0.5% | 0 | 0 |
| 7.1.9 | 1 | 4.8 | 0.5% | 0 | 0 |
| 7.1.8 | 1 | 4.8 | 0.5% | 0 | 0 |
| 7.1.7 | 1 | 4.8 | 0.5% | 0 | 0 |
| 7.1.10 | 1 | 4.8 | 0.5% | 0 | 0 |
| 24.2.0 | 3 | 5.9 | 0.3% | 0 | 0 |
| 23.1.1 | 1 | 6.1 | 0.3% | 0 | 0 |