CVE-2025-62180

Description

Pega Platform versions 8.3.0 through Infinity 25.1.2 are affected by an authorization weakness that may allow authenticated users to access certain additional data via crafted URLs.

References

• https://support.pega.com/support-doc/pega-security-advisory-h26-vulnerability-remediation-note
• https://support.pega.com/support-doc/pega-security-advisory-i25-vulnerability-remediation-note