High severity7.1NVD Advisory· Published Apr 14, 2025· Updated Jun 17, 2026
CVE-2025-2161
CVE-2025-2161
Description
Pega Platform versions 7.2.1 to Infinity 24.2.1 are affected by an XSS issue with Mashup
Affected products
6cpe:2.3:a:pega:pega_platform:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:pega:pega_platform:*:*:*:*:*:*:*:*range: >=7.2.1,<8.5.5
- cpe:2.3:a:pega:pega_platform:24.2.0:*:*:*:*:*:*:*
- (no CPE)range: 7.2.1 to Infinity 24.2.1
- osv-coords2 versionspkg:rpm/opensuse/brise&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/rime-plum-go&distro=openSUSE%20Tumbleweed
< 20230603+git.5fdd2d6-3.1+ 1 more
- (no CPE)range: < 20230603+git.5fdd2d6-3.1
- (no CPE)range: < 1.0.3-1.1
- Range: 7.2.1
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.