Skip to main content

Synchronization Engine

3 CVEs product

Monthly

CVE-2023-26467 Apr 10, 22:15 MEDIUM This Month

A man in the middle can redirect traffic to a malicious server in a compromised configuration. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Synchronization Engine Pega
NVD
CVSS 3.1
5.4
EPSS
0.6%
CVE-2023-28093 Apr 10, 21:15 MEDIUM This Month

A user with a compromised configuration can start an unsigned binary as a service. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Synchronization Engine Pega
NVD
CVSS 3.1
6.5
EPSS
1.4%
CVE-2023-26466 Apr 10, 21:15 HIGH This Week

A user with non-Admin access can change a configuration file on the client to modify the Server URL. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Synchronization Engine Pega
NVD
CVSS 3.1
7.8
EPSS
0.2%
EPSS 1% CVSS 5.4
MEDIUM This Month

A man in the middle can redirect traffic to a malicious server in a compromised configuration. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Synchronization Engine Pega
NVD
EPSS 1% CVSS 6.5
MEDIUM This Month

A user with a compromised configuration can start an unsigned binary as a service. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Synchronization Engine Pega
NVD
EPSS 0% CVSS 7.8
HIGH This Week

A user with non-Admin access can change a configuration file on the client to modify the Server URL. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Synchronization Engine Pega
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy