What’s Vulnerable › Vulnerabilities

CVE-2023-4843

• Severity: medium (CVSS 4.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-09-08 · updated 2026-06-17
• Weakness: CWE-74

Description

Pega Platform versions 7.1 to 8.8.3 are affected by an HTML Injection issue with a name field utilized in Visual Business Director, however this field can only be modified by an authenticated administrative user.

Affected products

• Pegasystems Pega Infinity: from 7.1.0 through 8.8.3

References

• https://support.pega.com/support-doc/pega-security-advisory-%E2%80%93-d23-vulnerability-remediation-note?
• https://support.pega.com/support-doc/pega-security-advisory-%E2%80%93-d23-vulnerability-remediation-note?

Get alerted when CVE-2023-4843 or the next vulnerability affects your stack