Pingfederate
Approved changes feed: RSS · Atom
cpe:2.3:a:ping_identity:pingfederate:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ping Identity (6d158c0c-35d7-577e-9df0-1f89137d9677) |
|---|---|
| Product | Pingfederate (ae7bc1bb-a7bd-581c-8595-c13b01913f39) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-26862 |
vulnerable | 2026-06-08 07:14:50.580965 |
PingFederate unexpected browser flow initiation in redirectless mode
Unexpected authentication form rendering in HTML Form Adapter using only non-default redirectless mode in PingFederate allows authentication attempts which may enable brute force login attacks.
Published: 2025-10-27T14:39:41.284Z
Updated: 2025-10-27T14:48:11.544Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22854 |
vulnerable | 2026-06-08 07:10:54.881768 |
Possible thread exhaustion from processing http responses in PingFederate Google Adapter
Improper handling of non-200 http responses in the PingFederate Google Adapter leads to thread exhaustion under normal usage conditions.
Published: 2025-06-15T15:00:06.010Z
Updated: 2025-06-16T18:07:39.037Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-21085 |
vulnerable | 2026-06-08 07:08:51.155943 |
PingFederate OAuth Grant attribute duplication may use excessive memory
PingFederate OAuth2 grant duplication in PostgreSQL persistent storage allows OAuth2 requests to use excessive memory utilization.
Published: 2025-06-15T14:25:39.067Z
Updated: 2025-06-16T18:08:20.514Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25573 |
vulnerable | 2026-06-08 06:31:23.248975 |
Stored Cross-Site Scripting in Administrative Console Context
Unsanitized user-supplied data saved in the PingFederate Administrative Console could trigger the execution of JavaScript code in subsequent user processing.
Published: 2025-06-15T15:25:38.540Z
Updated: 2025-06-16T18:05:43.793Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22477 |
vulnerable | 2026-06-08 06:29:35.847393 |
PingFederate OIDC Policy Management Editor Cross-Site Scripting
LOW (1.8)
A cross-site scripting vulnerability exists in the admin console OIDC Policy Management Editor. The impact is contained to admin console users only.
Published: 2024-07-09T23:01:28.611Z
Updated: 2024-08-01T22:51:09.905Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22377 |
vulnerable | 2026-06-08 06:29:34.753739 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21832 |
vulnerable | 2026-06-08 06:27:36.757718 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40545 |
vulnerable | 2026-06-08 06:11:03.577637 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40148 |
vulnerable | 2026-06-08 06:09:41.299948 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39219 |
vulnerable | 2026-06-08 06:09:35.996762 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37283 |
vulnerable | 2026-06-08 06:08:15.073149 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34085 |
vulnerable | 2026-06-08 06:06:24.374143 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40724 |
vulnerable | 2026-06-08 05:48:28.030574 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23722 |
vulnerable | 2026-06-08 05:40:58.291929 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42000 |
vulnerable | 2026-06-08 05:35:21.352189 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40329 |
vulnerable | 2026-06-08 05:35:17.404537 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.