Pega Synchronization Engine — known CVE vulnerabilities

Every CVE whose affected-product data names Pega Synchronization Engine, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2023-26466 — CVSS 7.8 (high): A user with non-Admin access can change a configuration file on the client to modify the Server URL.
• CVE-2023-28093 — CVSS 6.5 (medium): A user with a compromised configuration can start an unsigned binary as a service.
• CVE-2023-26467 — CVSS 5.4 (medium): A man in the middle can redirect traffic to a malicious server in a compromised configuration.