CVE Catalog

CVE-2025-62180

HighCVSS 7.1
Published: Updated: Translated: NVD NIST

Summary

Pega Platform versions 8.3.0 through Infinity 25.1.2 are affected by an authorization weakness that may allow authenticated users to access certain additional data via crafted URLs.

Risk Assessment

The organization may be exposed to unauthorized access to sensitive data, potentially leading to privacy breaches and information security issues.

Recommendation

It is recommended to update Pega Platform to the latest version to mitigate this authorization weakness and review user access policies.

Original NVD description (English source)

Pega Platform versions 8.3.0 through Infinity 25.1.2 are affected by an authorization weakness that may allow authenticated users to access certain additional data via crafted URLs.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS