Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface component. Requires an administrative user and given extensive access rights, impact to Confidentiality is low and Integrity is none.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-62184 Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface component. Requires an administrative use… https://www.cve.org/CVERecord?id=CVE-2025-62184
Post summary
Highlights that Pega Platform versions 8.1.0–25.1.0 are affected by a stored XSS in a UI component needing admin rights; no PoC, exploit, or patch details are offered.
🚨*CVE* CVE-2025-62184 Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface component. Requires an administrative use… https://www.cve.org/CVERecord?id=CVE-2025-62184 ----- Traducción: CVE-2025-62184 Peg… http://infoflow.cloud`
Post summary
The post notes CVE‑2025‑62184, a stored XSS flaw affecting Pega Platform versions 8.1.0‑25.1.0, linking to the official CVE record but providing no proof‑of‑concept, exploit code, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | pega | pega_platform | - | - | - |