Approved changes feed: RSS · Atom

cpe:2.3:a:ping_identity:pingam:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPing Identity (6d158c0c-35d7-577e-9df0-1f89137d9677)
ProductPingam (9b3ef9eb-9dcc-53fb-ab81-0c944439aa3d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-21391 vulnerable 2026-09-16 04:34:14.941416 Improper Claim Validation in PingAM OIDC Provider
An improper validation vulnerability exists within PingAM where a well-crafted request allows arbitrary or protected ID Token claims to be set or overridden. In certain configurations this could allow an attacker to bypass authentication controls via spoofing leading to privilege escalation or impersonation.
Published: 2026-09-14T11:18:33.045Z
Updated: 2026-09-14T14:25:10.479Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25566 vulnerable 2026-06-08 06:31:23.221408 Open Redirect in PingAM
An Open-Redirect vulnerability exists in PingAM where well-crafted requests may cause improper validation of redirect URLs. This could allow an attacker to redirect end-users to malicious sites under their control, simplifying phishing attacks
Published: 2024-10-29T15:34:53.358Z
Updated: 2024-10-29T19:58:25.775Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.