CVE-2023-28094: Pega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a version prior to 8.x may be utilizing default credentials.
8.1
CVSS
Description
Pega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a version prior to 8.x may be utilizing default credentials.
Classification
CVE ID: CVE-2023-28094
CVSS Base Severity: HIGH
CVSS Base Score: 8.1
Affected Products
Vendor: Pegasystems
Product: Pega Platform
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.2% (probability of being exploited)
EPSS Percentile: 58.22% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)