CVE-2020-23957

PoC —

CVSS 3.1

6.1 medium

EPSS

<1%p51

Published

Dec 15, 2020 (Dec 15, 2020)

Modified

Jun 17, 2026

Description

Pega Platform through 8.4.x is affected by Cross Site Scripting (XSS) via the ConnectionID parameter, as demonstrated by a pyActivity=Data-TRACERSettings.pzStartTracerSession request to a PRAuth URI.

Vendors: pega
Products: pega platform
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.