CVE-2017-17478 - CVE House
Back to Database
Status published Medium CVE-2017-17478

An XSS issue was discovered in Designer Studio in Pegasystems...

Vulnerability Description

An XSS issue was discovered in Designer Studio in Pegasystems Pega Platform 7.1.7, 7.1.8, 7.1.9, 7.1.10, 7.2, 7.2.1, and 7.2.2. A user with developer credentials can insert malicious code (up to 64 characters) into a text field in Designer Studio, after establishing context. Designer Studio is the developer workbench for Pega Platform. That XSS payload will execute when other developers visit the affected pages.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-17478

Credits & Attribution

No credits recorded in the NVD database.

References

More from pega

View All →
CVE-2020-8775
Pega Platform before version 8.2.6 is affected by a Stored...
High 8.9
CVE-2020-8774
Pega Platform before version 8.2.6 is affected by a Reflected...
High 8.8
CVE-2020-8773
The Richtext Editor in Pega Platform before 8.2.6 is affected...
High 8.9
CVE-2020-24353
Pega Platform before 8.4.0 has a XSS issue via stream...
Medium 6.1
CVE-2020-23957
Pega Platform through 8.4.x is affected by Cross Site Scripting...
Medium 6.1

Affected Vendor

Affected Software

pega platform
Vulnerable Versions:
7.1.7, 7.1.8, 7.1.9, 7.1.10, 7.2, 7.2.1, 7.2.2

Timeline

Official Publish: February 27th, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.