CVE-2024-6701
CVSS 3.1 Score 4.8 of 10 (medium)
Details
Summary
CVE-2024-6701 identifies a cross-site scripting (XSS) vulnerability affecting Pega Platform versions 8.1 through Infinity 24.1.2, which could potentially impact a range of related products. The vulnerability requires high privileges for exploitation and necessitates user interaction, making the attack vector network-based with low complexity. Although the integrity and confidentiality impacts are rated as low, the potential danger lies in the possibility of unauthorized actions being executed within the application context, which could compromise sensitive data or functionality. To remediate this issue, users should refer to Pega's security advisory for guidance on implementing necessary updates and patches. The situation underscores the importance of maintaining up-to-date software to mitigate risks associated with known vulnerabilities.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions