Pega Infinity vulnerabilities
4 known vulnerabilities in Pega Infinity from Pegasystems. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Pega Infinity: Unchecked Input for Loop Condition
Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping.
- 8.6 High severity
Pega Infinity: Improper Verification of Cryptographic Signature
Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls.
- 7.1 High severity
Pega Infinity: Authorization Bypass Through User-Controlled Key
Pega Platform versions 8.3.0 through Infinity 25.1.2 are affected by an authorization weakness that may allow authenticated users to access certain additional data via crafted URLs.
- 9.8 Critical severity
Pega Infinity: Deserialization of Untrusted Data
If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Internet and port filtering is not properly configured, then it may be possible to upload serialized payloads to attack the underlying system. T