CVE-2025-8681: Pega Platform

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Pega Platform versions 7.1.0 to Infinity 24.2.2 are affected by a Stored XSS issue in a user interface component.  Requires a high privileged user with a developer role.

Affected products

• Pega Pega Platform: from 7.1.0, before 23.1.5 (fixed in 23.1.5); from 24.1.0, before 24.1.3 (fixed in 24.1.3); from 24.2.0, before 24.2.2 (fixed in 24.2.2)

Published 2025-09-10. Last modified 2026-09-26.