PI
Product
Pingfederate
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 3Medium 8Low 0
Watch
Add Pingfederate to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-40545 | 9.8 | Feb 6 | PingFederate OAuth client_secret_jwt Authentication Bypass Affected: 11.3.0 |
| CVE-2023-37283 | 9.8 | Oct 25 | Authentication Bypass via HTML Form & Identifier First Adapter Affected: 10.3.0 through 10.3.12; 11.1.0 through 11.1.7; 11.2.0 through 11.2.6; 11.3.0 |
| CVE-2021-40329 | 9.8 | Sep 27 | The Authentication API in Ping Identity PingFederate before 10.3 mishandles certain aspects of external password management Affected: before 10.3 |
Showing 3