CVE-2022-35656: Pega Platform

Medium severity, CVSS 4.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Pega Platform from 8.3 to 8.7.3 vulnerability may allow authenticated security administrators to alter CSRF settings directly.

Affected products

• Pega Pega Platform: from 8.3, up to and including 8.7.3

Published 2022-08-22. Last modified 2026-06-17.