Skyler Knecht

**Name of the Vulnerable Software and Affected Versions** Pega Platform versions 8.1 to Infinity 23.1.0 **Description** The issue is an XSS problem related to task creation. **Recommendations** For Pega Platform versions 8.1 to Infinity 23.1.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Pega Platform versions 8.1 to Infinity 23.1.0 **Description** The issue is related to an XSS problem with ad-hoc case creation. **Recommendations** For Pega Platform versions 8.1 to Infinity 23.1.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned in the provided descriptions. **Description** A user with non-Admin access can change a configuration file on the client to modify the Server URL. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned. **Description** A man in the middle can redirect traffic to a malicious server in a compromised configuration. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.