← All advisories

High severity8.8NVD Advisory· Published Apr 29, 2020· Updated Jun 17, 2026

CVE-2020-8774

CVE-2020-8774

Description

Pega Platform before version 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the "ActionStringID" function.

Affected products

3

Pega/Pega Platform2 versions
cpe:2.3:a:pega:pega_platform:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:pega:pega_platform:*:*:*:*:*:*:*:*range: <8.2.6
- (no CPE)range: <8.2.6
Pega/Pega Platformdescription

Patches

Vulnerability mechanics

References

1

community.pega.com/node/1913996nvdVendor Advisory

News mentions

0

No linked articles in our index yet.