← All advisories

High severity8.1NVD Advisory· Published Apr 14, 2025· Updated Jun 17, 2026

CVE-2025-2160

CVE-2025-2160

Description

Pega Platform versions 8.4.3 to Infinity 24.2.1 are affected by an XSS issue with Mashup

Affected products

4

Pega/Platform3 versions
cpe:2.3:a:pega:pega_platform:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:pega:pega_platform:*:*:*:*:*:*:*:*range: >=8.4.3,<8.5.5
- cpe:2.3:a:pega:pega_platform:24.2.0:*:*:*:*:*:*:*
- (no CPE)range: 8.4.3 to 24.2.1
Capasystems/Pega Infinityv5
Range: 8.4.3

Patches

Vulnerability mechanics

References

1

support.pega.com/support-doc/pega-security-advisory-d25-vulnerability-remediation-notenvdVendor Advisory

News mentions

0

No linked articles in our index yet.