Skip to content
OpenAdvisories

Vendor

Ping Identity

53 known vulnerabilities.

Products

PingFederate 18 PingID Windows Login 6 PingAccess 3 PingOne MFA Integration Kit for PingFederate 2 PingIDM 2 PingAM 2 PingID Mobile Application 2 PingDirectory 2 PingID Radius PCV 2 PingAM Java Policy Agent 1 Self-Service Account Manager 1 One-Time Passcode Integration Kit for PingFederate 1 PingID Mac Login 1 PingID Adapter for PingFederate 1 PingID Integration Kit (includes PingID Adapter) 1 PingFederate (includes PingID Adapter) 1 PingID Desktop for Windows 1 PingID Desktop for macOS 1 PingCentral 1 PingID Integration Kit (includes Radius PCV) 1 PingFederate (includes Radius PCV) 1 PingID Integration for Windows Login 1 PingOne MFA Integration Kit 1 PingFederate PingOne MFA Integration Kit 1 RSA SecurID Integration Kit 1 PingID Desktop 1 PingGateway 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.5
    CVE-2026-21391

    Improper Claim Validation in PingAM OIDC Provider

    An improper validation vulnerability exists within PingAM where a well-crafted request allows arbitrary or protected ID Token claims to be set or overridden. In certain configurations this could allow an attacker to bypass authentication controls via spoofing…

    Ping Identity PingAM
  • Critical 9.2
    CVE-2025-20059

    PingAM Java Policy Agent path traversal

    Relative Path Traversal vulnerability in Ping Identity PingAM Java Policy Agent allows Parameter Injection.This issue affects PingAM Java Policy Agent: through 5.10.3, through 2023.11.1, through 2024.9.

    Ping Identity PingAM Java Policy Agent