Skip to content
OpenAdvisories
Critical · 9.2 CVE-2025-20059 EUVD-2025-5090

PingAM Java Policy Agent path traversal

Published Feb 20, 2025 · Updated Feb 20, 2025 · Assigned by Ping Identity

Vendor: Ping Identity Product: PingAM Java Policy Agent

Description

Relative Path Traversal vulnerability in Ping Identity PingAM Java Policy Agent allows Parameter Injection.This issue affects PingAM Java Policy Agent: through 5.10.3, through 2023.11.1, through 2024.9.

Affected products

VendorProductAffectedFixed
Ping Identity PingAM Java Policy Agent ≤ 5.10.3, ≤ 2023.11.1, ≤ 2024.9 —

References