Aggregating NVD, CVE, and multi-source threat feeds, this list provides deep analysis of high-risk threats such as RCE. By integrating CVSS and EPSS models, the system dynamically tracks Exp (Exploit) resources and PoC availability to accurately assess Exploitability. Combined with official Patches and remediation strategies, it helps prioritize Vulnerability Management workflows, significantly shortening response cycles and securing your critical assets.
Assigner (CNA / source)：[email protected] Remove this filter
| CVE | Description | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|
| CVE-2022-24083 | Password authentication bypass vulnerability for local accounts can be used to bypass local authentication checks. | 9.8 | 0.77% | 2022-07-25 | 2026-06-17 |
| CVE-2022-24082 | If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Internet and port filtering is not properly configured, then it may be possible to upload serialized payloads to attack the underlying system. This does not affect systems running on PegaCloud due to its design and architecture. | 9.8 | 9.48% | 2022-07-19 | 2026-06-17 |
| CVE-2021-27654 | Forgotten password reset functionality for local accounts can be used to bypass local authentication checks. | 7.8 | 0.59% | 2022-01-28 | 2026-06-16 |
| CVE-2021-27651 | In versions 8.2.1 through 8.5.2 of Pega Infinity, the password reset functionality for local accounts can be used to bypass local authentication checks. | 9.8 | 53.84% | 2021-04-29 | 2026-06-16 |
| CVE-2021-27653 | Misconfiguration of the Pega Chat Access Group portal in Pega platform 7.4.0 - 8.5.x could lead to unintended data exposure. | 6.6 | 1.09% | 2021-04-01 | 2026-06-16 |