CVE-2025-9559

Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data PUBLISHED

Description (CNA)

Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data.

Affected (CNA)

Vendor / product	Versions
Pegasystems / Pega Infinity	affected 8.7.5 before Infinity 24.2.3

CWE

CWE-639

References

https://support.pega.com/support-doc/pega-security-advisory-h25-vulnerability-remediation-note

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.