Pegasystems Pega Infinity

Name: Pegasystems Pega Infinity
Brand: Pegasystems

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

unpatched

by severity

4critical1high16medium1low

updated 2026-10-28

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-27651US	critical9.8	53.8% (99th)	Exploit	unspecified	2021-04-29	2 versions
CVE-2022-24082US	critical9.8	12.2% (96th)	Exploit	8.7.3	2022-07-19	2 versions
CVE-2022-24083US	critical9.8	0.94% (61st)	—	unspecified	2022-07-25	2 versions
CVE-2026-10754US	—	0.78% (56th)	—	Infinity 25.1.3	2026-08-10	8.5.0 → Infinity 25.1.3
CVE-2021-27654US	high7.8	0.60% (49th)	—	unspecified	2022-01-28	2 versions
CVE-2022-35654US	medium6.1	0.53% (45th)	—	unspecified	2022-08-22	2 versions
CVE-2022-35655US	medium6.1	0.48% (42nd)	—	unspecified	2022-08-22	2 versions
CVE-2024-10094US	critical9.8	0.48% (41st)	—	24.1.2	2024-11-20	6.1 → 24.1.2
CVE-2023-26465US	medium6.1	0.44% (38th)	—	unspecified	2023-06-09	2 versions
CVE-2025-62181US	—	0.44% (38th)	—	Infinity 25.1.1	2025-12-10	7.1.0 → Infinity 25.1.1
CVE-2026-14337US	—	0.42% (36th)	—	Infinity 25.1.4	2026-08-04	23.1.0 → Infinity 25.1.4
CVE-2025-9559US	medium6.5	0.40% (34th)	—	Infinity 24.2.3	2025-10-16	8.7.5 → Infinity 24.2.3
CVE-2025-62180US	—	0.36% (30th)	—	Infinity 25.1.3	2026-06-23	8.3.0 → Infinity 25.1.3
CVE-2022-35656US	medium4.5	0.33% (26th)	—	8.7.3	2022-08-22	2 versions
CVE-2024-12211US	—	0.33% (26th)	—	24.2.1	2025-01-13	8.1 → 24.2.1
CVE-2025-62183US	—	0.29% (22nd)	—	Infinity 25.1.1	2026-02-17	8.1.0 → Infinity 25.1.1
CVE-2025-2161US	medium6.1	0.28% (21st)	—	24.2.2	2025-04-14	7.2.1 → 24.2.2
CVE-2025-2160US	medium6.1	0.28% (21st)	—	24.2.2	2025-04-14	8.4.3 → 24.2.2
CVE-2025-62184US	low3.4	0.27% (19th)	—	Infinity 25.1.0	2026-03-31	8.1.0 → Infinity 25.1.0
CVE-2025-62182US	—	0.27% (19th)	—	Infinity 25.1.1	2026-01-13	8.7.0 → Infinity 25.1.1
CVE-2024-6702US	medium4.8	0.26% (18th)	—	24.1.3	2024-09-12	8.1 → 24.1.3
CVE-2024-6701US	medium4.8	0.26% (18th)	—	24.1.3	2024-09-12	8.1 → 24.1.3
CVE-2024-6700US	medium4.8	0.26% (18th)	—	24.1.3	2024-09-12	8.1 → 24.1.3
CVE-2026-1563US	medium4.8	0.24% (15th)	—	Infinity 25.1.2	2026-07-15	8.1.0 → Infinity 25.1.2
CVE-2026-1562US	medium4.8	0.24% (15th)	—	Infinity 25.1.2	2026-07-15	8.1.0 → Infinity 25.1.2
CVE-2024-10716US	medium4.8	0.21% (12th)	—	24.2.1	2024-12-05	8.1 → 24.2.1
CVE-2025-8681US	medium5.4	0.19% (9th)	—	Infinity 24.2.3	2025-09-10	7.1.0 → Infinity 24.2.3
CVE-2026-1711US	medium4.8	0.19% (8th)	—	Infinity 25.1.2	2026-04-15	8.1.0 → Infinity 25.1.2
CVE-2026-1564US	medium4.8	0.19% (8th)	—	Infinity 25.1.2	2026-04-15	8.1.0 → Infinity 25.1.2

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')17 CVEs
CWE-639Authorization Bypass Through User-Controlled Key2 CVEs
CWE-204Observable Response Discrepancy1 CVEs
CWE-285Improper Authorization1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-347Improper Verification of Cryptographic Signature1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan