PT-2026-51527 · Pegasystems · Pega Infinity

Publicado 2026-06-23 · Atualizado 2026-06-23 · CVE-2025-62180

Mitre

CVSS v4.0

7.1

Alta

Vetor base

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N

Pega Platform versions 8.3.0 through Infinity 25.1.2 are affected by an authorization weakness that may allow authenticated users to access certain additional data via crafted URLs.

Correção

IDOR

Enumeração de Fraquezas

CWE-639

Identificadores relacionados

CVE-2025-62180

Produtos afetados

Pega Infinity

Referências · 3

• https://support.pega.com/support-doc/pega-security-advisory-i25-vulnerability-remediation-note · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-62180 · Nota de Segurança
• https://support.pega.com/support-doc/pega-security-advisory-h26-vulnerability-remediation-note · Nota