Skip to content
OpenAdvisories

Product · Ping Identity

PingFederate

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 2.1
    CVE-2025-21085

    PingFederate OAuth Grant attribute duplication may use excessive memory

    PingFederate OAuth2 grant duplication in PostgreSQL persistent storage allows OAuth2 requests to use excessive memory utilization.

    Ping Identity PingFederate
  • Low 3.5
    CVE-2024-21832

    PingFederate REST API Data Store Injection

    A potential JSON injection attack vector exists in PingFederate REST API data stores using the POST method and a JSON request body.

    Ping Identity PingFederate
  • Low 1.8
    CVE-2024-22477

    PingFederate OIDC Policy Management Editor Cross-Site Scripting

    A cross-site scripting vulnerability exists in the admin console OIDC Policy Management Editor. The impact is contained to admin console users only.

    Ping Identity PingFederate
  • Low 2.6
    CVE-2023-34085

    User Attribute Disclosure via DynamoDB Data Stores

    When an AWS DynamoDB table is used for user attribute storage, it is possible to retrieve the attributes of another user using a maliciously crafted request

    Ping Identity PingFederate