Skip to contentPing Identity Pingfederate vulnerabilities
- ping identity pingfederateImproper Authorization in PingFederate Administrative Expression Evaluation EndpointCVE-2026-207738.5 High
- ping identity pingfederatePingFederate Administrative Console CSRF weaknessesCVE-2025-327364.9 Medium
- ping identity one-time passcode integration kit for pingfederateAuthentication Bypass in OTP (One-time Passcode) IdP Adapter Integration KitCVE-2025-279358.6 High
- ping identity pingfederatePingFederate unexpected browser flow initiation in redirectless modeCVE-2025-268620.0 None
- ping identity pingfederateStored Cross-Site Scripting in Administrative Console ContextCVE-2024-255736.9 Medium
- ping identity pingfederatePossible thread exhaustion from processing http responses in PingFederate Google AdapterCVE-2025-228546.9 Medium
- ping identity pingfederatePingFederate OAuth Grant attribute duplication may use excessive memoryCVE-2025-210852.1 Low
- ping identity pingfederatePingFederate REST API Data Store InjectionCVE-2024-218323.5 Low
- ping identity pingfederatePingFederate Runtime Node Path TraversalCVE-2024-223775.3 Medium
- ping identity pingfederatePingFederate OIDC Policy Management Editor Cross-Site ScriptingCVE-2024-224771.8 Low
- ping identity pingone mfa integration kit for pingfederate, pingone mfa intergration kit for pingfederate +1 morePingOne MFA Integration Kit MFA bypassCVE-2023-403568.7 High
- pingidentity pingone mfa integration kit, ping identity pingone mfa integration kit for pingfederate +1 morePingOne MFA Integration Kit MFA bypassCVE-2023-407027.7 High
- ping identity pingfederatePingFederate Server Side Request Forgery vulnerabilityCVE-2023-401486.5 Medium
- ping identity pingfederatePingFederate OAuth client_secret_jwt Authentication BypassCVE-2023-405458.8 High
- ping identity pingfederateUser Attribute Disclosure via DynamoDB Data StoresCVE-2023-340852.6 Low
- ping identity pingfederateAdmin Console Denial of Service via Java class enumerationCVE-2023-392197.5 High
- ping identity pingfederateAuthentication Bypass via HTML Form & Identifier First AdapterCVE-2023-372838.1 High
- ping identity pingfederateCross-Site Request Forgery on PingFederate Local Identity Profiles Endpoint.CVE-2022-407246.4 Medium
- ping identity pingid radius pcv, pingidentity pingfederate, radius pcv +3 more +5 moreConfiguration-based MFA Bypass in PingID RADIUS PCV.CVE-2022-407236.5 Medium
- ping identity pingid adapter for pingfederate, pingidentity pingfederate, ping identity pingfederate (includes pingid adapter) +2 more +4 moreMisconfiguration of RSA padding for offline MFA in the PingID Adapter for PingFederate.CVE-2022-407227.7 High
- ping identity pingfederate pingone mfa integration kit, pingidentity pingone mfa integration kit +1 morePingFederate PingOneMFA Integration Kit MFA BypassCVE-2022-237237.7 High
- ping identity pingfederatePingFederate Password Reset via Authentication API MishandlingCVE-2022-237226.5 Medium
- ping identity pingfederatePing Identity PingFederate Password Reset and Password Change Mishandling with an authentication policy in parallel reset flowsCVE-2021-420005.3 Medium
- ping identity pingfederateThe Authentication API in Ping Identity PingFederate before 10.3 mishandles certain aspects of...CVE-2021-403299.8 Critical