Hi,

Yes, customer needs to know the list of 3rd parties software/libraries that Pega internally used (for Pega 7.2.2 and CS 7.2.2, to be specific). The idea is that there is a need to ensure Pega does not inherit any vulnerabilities from those. Thus, apart from the list, it is also important to explain how Pega is being informed of those, Pega's security announcement as well as the procedure that Pega adopted to address and fixes those.

Thanks and looking forward to the advice.

Regards,

Jacky