VYPR
High severity8.1NVD Advisory· Published Apr 14, 2025· Updated Jun 17, 2026

CVE-2025-2160

CVE-2025-2160

Description

Pega Platform versions 8.4.3 to Infinity 24.2.1 are affected by an XSS issue with Mashup

Affected products

4
  • cpe:2.3:a:pega:pega_platform:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:pega:pega_platform:*:*:*:*:*:*:*:*range: >=8.4.3,<8.5.5
    • cpe:2.3:a:pega:pega_platform:24.2.0:*:*:*:*:*:*:*
    • (no CPE)range: 8.4.3 to 24.2.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.