Pingidentity Pingfederate vulnerabilities

• ping identity pingfederate PingFederate Runtime Node Path Traversal CVE-2024-22377 5.3 MediumJuly 9, 2024
• ping identity pingfederate PingFederate OIDC Policy Management Editor Cross-Site Scripting CVE-2024-22477 1.8 LowJuly 9, 2024
• ping identity pingfederate PingFederate Server Side Request Forgery vulnerability CVE-2023-40148 6.5 MediumApril 10, 2024
• ping identity pingfederate PingFederate OAuth client_secret_jwt Authentication Bypass CVE-2023-40545 8.8 HighFebruary 6, 2024
• ping identity pingfederate User Attribute Disclosure via DynamoDB Data Stores CVE-2023-34085 2.6 LowOctober 25, 2023
• ping identity pingfederate Admin Console Denial of Service via Java class enumeration CVE-2023-39219 7.5 HighOctober 25, 2023
• ping identity pingfederate Authentication Bypass via HTML Form & Identifier First Adapter CVE-2023-37283 8.1 HighOctober 25, 2023
• ping identity pingfederate Cross-Site Request Forgery on PingFederate Local Identity Profiles Endpoint. CVE-2022-40724 6.4 MediumApril 25, 2023
• ping identity pingid radius pcv, pingidentity pingfederate, radius pcv +3 more +5 more Configuration-based MFA Bypass in PingID RADIUS PCV. CVE-2022-40723 6.5 MediumApril 25, 2023
• ping identity pingid adapter for pingfederate, pingidentity pingfederate, ping identity pingfederate (includes pingid adapter) +2 more +4 more Misconfiguration of RSA padding for offline MFA in the PingID Adapter for PingFederate. CVE-2022-40722 7.7 HighApril 25, 2023
• ping identity pingfederate PingFederate Password Reset via Authentication API Mishandling CVE-2022-23722 6.5 MediumMay 2, 2022
• ping identity pingfederate Ping Identity PingFederate Password Reset and Password Change Mishandling with an authentication policy in parallel reset flows CVE-2021-42000 5.3 MediumFebruary 10, 2022
• pingidentity pingfederate Ping Identity PingFederate before 10.3.1 mishandles pre-parsing validation, leading to an XXE... CVE-2021-41770 7.5 HighOctober 7, 2021
• ping identity pingfederate The Authentication API in Ping Identity PingFederate before 10.3 mishandles certain aspects of... CVE-2021-40329 9.8 CriticalSeptember 27, 2021
• pingidentity pingfederate Open redirect vulnerability in startSSO.ping in the SP Endpoints in Ping Identity PingFederate 6... CVE-2014-8489 6.4 MediumDecember 12, 2014