CVE-2026-14337 — Pega Platform versions 23.1.0 through 25.1.3 are affected by an Stored Cross-site scripting (XSS) vulnerability in a…

CVE-2026-14337

Pega Platform versions 23.1.0 through 25.1.3 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role. PUBLISHED

Description (CNA)

Pega Platform versions 23.1.0 through 25.1.3 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.

Affected (CNA)

Vendor / product	Versions
Pegasystems / Pega Infinity	affected 23.1.0 before Infinity 25.1.4

CWE

CWE-79

References

https://support.pega.com/support-doc/pega-security-advisory-o26-vulnerability-remediation-note

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.