Approved changes feed: RSS · Atom

cpe:2.3:a:ping_identity:pingdirectory:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPing Identity (6d158c0c-35d7-577e-9df0-1f89137d9677)
ProductPingdirectory (3bd9fccb-6f11-52e3-84d9-ef9cc3449cc3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-20746 vulnerable 2026-07-29 00:29:05.819870 PingDirectory copying of virtual attributes leads to memory exhaustion
Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust java memory heap when recent login history is enabled and copying virtual attributes that reference ds-privilege-name values.
Published: 2026-06-12T02:16:59.690Z
Updated: 2026-06-12T13:30:51.709Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36496 vulnerable 2026-06-08 06:08:12.075338 Delegated Admin Virtual Attribute Provider Privilege Escalation
HIGH (7.7)
Delegated Admin Privilege virtual attribute provider plugin, when enabled, allows an authenticated user to elevate their permissions in the Directory Server.
Published: 2024-02-01T23:00:03.660Z
Updated: 2025-06-17T21:29:22.156Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.