Pingfederate
Approved changes feed: RSS · Atom
cpe:2.3:a:ping_identity:pingfederate:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ping Identity (6d158c0c-35d7-577e-9df0-1f89137d9677) |
|---|---|
| Product | Pingfederate (ae7bc1bb-a7bd-581c-8595-c13b01913f39) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-20773 |
vulnerable | 2026-09-16 04:34:05.506168 |
Improper Authorization in PingFederate Administrative Expression Evaluation Endpoint
A role-based access control issue was identified in the administrative expression evaluation functionality. This could allow users with certain administrative roles to access expression testing capabilities beyond their intended permissions.
Published: 2026-09-14T10:43:20.164Z
Updated: 2026-09-14T11:19:44.686Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32736 |
vulnerable | 2026-09-16 04:26:24.956608 |
PingFederate Administrative Console CSRF weaknesses
Cross-Site Request Forgery weaknesses in the Administrative Console of PingFederate versions before version 13.1 may allow actors to perform unauthorized actions via specially-crafted links triggered by administrators with active sessions.
Published: 2026-08-10T21:54:21.818Z
Updated: 2026-08-28T19:40:37.084Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26862 |
vulnerable | 2026-06-08 07:14:50.580965 |
PingFederate unexpected browser flow initiation in redirectless mode
Unexpected authentication form rendering in HTML Form Adapter using only non-default redirectless mode in PingFederate allows authentication attempts which may enable brute force login attacks.
Published: 2025-10-27T14:39:41.284Z
Updated: 2025-10-27T14:48:11.544Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22854 |
vulnerable | 2026-06-08 07:10:54.881768 |
Possible thread exhaustion from processing http responses in PingFederate Google Adapter
Improper handling of non-200 http responses in the PingFederate Google Adapter leads to thread exhaustion under normal usage conditions.
Published: 2025-06-15T15:00:06.010Z
Updated: 2025-06-16T18:07:39.037Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-21085 |
vulnerable | 2026-06-08 07:08:51.155943 |
PingFederate OAuth Grant attribute duplication may use excessive memory
PingFederate OAuth2 grant duplication in PostgreSQL persistent storage allows OAuth2 requests to use excessive memory utilization.
Published: 2025-06-15T14:25:39.067Z
Updated: 2025-06-16T18:08:20.514Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25573 |
vulnerable | 2026-06-08 06:31:23.248975 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22477 |
vulnerable | 2026-06-08 06:29:35.847393 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22377 |
vulnerable | 2026-06-08 06:29:34.753739 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21832 |
vulnerable | 2026-06-08 06:27:36.757718 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40545 |
vulnerable | 2026-06-08 06:11:03.577637 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40148 |
vulnerable | 2026-06-08 06:09:41.299948 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39219 |
vulnerable | 2026-06-08 06:09:35.996762 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37283 |
vulnerable | 2026-06-08 06:08:15.073149 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34085 |
vulnerable | 2026-06-08 06:06:24.374143 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40724 |
vulnerable | 2026-06-08 05:48:28.030574 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23722 |
vulnerable | 2026-06-08 05:40:58.291929 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42000 |
vulnerable | 2026-06-08 05:35:21.352189 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40329 |
vulnerable | 2026-06-08 05:35:17.404537 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.