Pegasystems Pega Infinity

Name: Pegasystems Pega Infinity
Brand: Pegasystems

ProduktEU

Ein im Bedrohungsgraphen erfasstes Produkt; die Schwachstellen unten betreffen es bekanntermaßen.

KEV-gelistet

ungepatcht

nach Schweregrad

4critical1high16medium1low

aktualisiert 2026-10-28

Schwachstellen (29)

Zugehörige CVEs.

Sortierung

ID	Schweregrad	EPSS	ausnutzbar	behoben	veröffentlicht	betroffen
CVE-2021-27651US	critical9.8	53.8% (99th)	Exploit	unspecified	2021-04-29	2 Versionen
CVE-2022-24082US	critical9.8	12.2% (96th)	Exploit	8.7.3	2022-07-19	2 Versionen
CVE-2022-24083US	critical9.8	0.94% (61st)	—	unspecified	2022-07-25	2 Versionen
CVE-2026-10754US	—	0.78% (56th)	—	Infinity 25.1.3	2026-08-10	8.5.0 → Infinity 25.1.3
CVE-2021-27654US	high7.8	0.60% (49th)	—	unspecified	2022-01-28	2 Versionen
CVE-2022-35654US	medium6.1	0.53% (45th)	—	unspecified	2022-08-22	2 Versionen
CVE-2022-35655US	medium6.1	0.48% (42nd)	—	unspecified	2022-08-22	2 Versionen
CVE-2024-10094US	critical9.8	0.48% (41st)	—	24.1.2	2024-11-20	6.1 → 24.1.2
CVE-2023-26465US	medium6.1	0.44% (38th)	—	unspecified	2023-06-09	2 Versionen
CVE-2025-62181US	—	0.44% (38th)	—	Infinity 25.1.1	2025-12-10	7.1.0 → Infinity 25.1.1
CVE-2026-14337US	—	0.42% (36th)	—	Infinity 25.1.4	2026-08-04	23.1.0 → Infinity 25.1.4
CVE-2025-9559US	medium6.5	0.40% (34th)	—	Infinity 24.2.3	2025-10-16	8.7.5 → Infinity 24.2.3
CVE-2025-62180US	—	0.36% (30th)	—	Infinity 25.1.3	2026-06-23	8.3.0 → Infinity 25.1.3
CVE-2022-35656US	medium4.5	0.33% (26th)	—	8.7.3	2022-08-22	2 Versionen
CVE-2024-12211US	—	0.33% (26th)	—	24.2.1	2025-01-13	8.1 → 24.2.1
CVE-2025-62183US	—	0.29% (22nd)	—	Infinity 25.1.1	2026-02-17	8.1.0 → Infinity 25.1.1
CVE-2025-2161US	medium6.1	0.28% (21st)	—	24.2.2	2025-04-14	7.2.1 → 24.2.2
CVE-2025-2160US	medium6.1	0.28% (21st)	—	24.2.2	2025-04-14	8.4.3 → 24.2.2
CVE-2025-62184US	low3.4	0.27% (19th)	—	Infinity 25.1.0	2026-03-31	8.1.0 → Infinity 25.1.0
CVE-2025-62182US	—	0.27% (19th)	—	Infinity 25.1.1	2026-01-13	8.7.0 → Infinity 25.1.1
CVE-2024-6702US	medium4.8	0.26% (18th)	—	24.1.3	2024-09-12	8.1 → 24.1.3
CVE-2024-6701US	medium4.8	0.26% (18th)	—	24.1.3	2024-09-12	8.1 → 24.1.3
CVE-2024-6700US	medium4.8	0.26% (18th)	—	24.1.3	2024-09-12	8.1 → 24.1.3
CVE-2026-1563US	medium4.8	0.24% (15th)	—	Infinity 25.1.2	2026-07-15	8.1.0 → Infinity 25.1.2
CVE-2026-1562US	medium4.8	0.24% (15th)	—	Infinity 25.1.2	2026-07-15	8.1.0 → Infinity 25.1.2
CVE-2024-10716US	medium4.8	0.21% (12th)	—	24.2.1	2024-12-05	8.1 → 24.2.1
CVE-2025-8681US	medium5.4	0.19% (9th)	—	Infinity 24.2.3	2025-09-10	7.1.0 → Infinity 24.2.3
CVE-2026-1711US	medium4.8	0.19% (8th)	—	Infinity 25.1.2	2026-04-15	8.1.0 → Infinity 25.1.2
CVE-2026-1564US	medium4.8	0.19% (8th)	—	Infinity 25.1.2	2026-04-15	8.1.0 → Infinity 25.1.2

Schwächen (8)

Die Schwächeklassen (CWEs), die die meisten dieser CVEs teilen.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')17 CVEs
CWE-639Authorization Bypass Through User-Controlled Key2 CVEs
CWE-204Observable Response Discrepancy1 CVEs
CWE-285Improper Authorization1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-347Improper Verification of Cryptographic Signature1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type1 CVEs

Datenquellen (1)

Welche Quellen diesen Datensatz belegen und wann.

EUEU Vulnerability Database (ENISA)29 CVEs

scry

Produkte tragen bekannte Schwachstellen, sobald sie im Internet exponiert sind. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan