CVE-2025-62180

UNKNOWN 0.0

Pega Platform versions 8.3.0 through Infinity 25.1.2 are affected by an authorization weakness that may allow authenticated users to access certain additional data via crafted URLs.

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Pega Platform versions 8.3.0 through Infinity 25.1.2 are affected by an authorization weakness that may allow authenticated users to access certain additional data via crafted URLs.

CWE	CWE-639
Vendor	pegasystems
Product	pega infinity
Published	Jun 23, 2026

Stay Ahead of the Next One

Get instant alerts for pegasystems pega infinity

Be the first to know when new unknown vulnerabilities affecting pegasystems pega infinity are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Pegasystems / Pega Infinity

8.3.0 < Infinity 25.1.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗

support.pega.com: https://support.pega.com/support-doc/pega-security-advisory-i25-vulnerability-remediation-note support.pega.com: https://support.pega.com/support-doc/pega-security-advisory-h26-vulnerability-remediation-note

Credits

Mohammed F. Alaskar from Saudi Awwal Bank Cybersecurity Team