Login Request a demo
PI
Product
Pingfederate
by Pingidentity · last CVE Jul 9, 2024
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 3High 3Medium 8Low 0
Severity
All severities15Critical3High3Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Pingfederate to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-40148
6.5
0%
Apr 10
PingFederate Server Side Request Forgery vulnerability
Affected: 11.0.0 through 11.0.8; 11.1.0 through 11.1.8; 11.2.0 through 11.2.7; 11.3.0 through 11.3.2
CVE-2022-40723
6.5
1%
Apr 25
Configuration-based MFA Bypass in PingID RADIUS PCV.
Affected: 11.1.0 through 11.1.5; 11.2.0 through 11.2.2
CVE-2022-23722
6.5
1%
May 2
PingFederate Password Reset via Authentication API Mishandling
Affected: 9.3.0 before 9.3.3; 10.0.0 before 10.0.12; 10.1.0 before 10.1.9; 10.2.0 before 10.2.7; 10.3.0 before 10.3.4; 9.3.3; +1 more
CVE-2021-42000
6.5
1%
Feb 10
Ping Identity PingFederate Password Reset and Password Change Mishandling with an authentication policy in parallel reset flows
Affected: through 9.3.0; 10.0.0 through 10.0.11; 10.1.0 through 10.1.8; 10.2.0 through 10.2.6; 10.3.0 through 10.3.2; 9.3.3; +1 more
CVE-2022-40722
5.8
0%
Apr 25
Misconfiguration of RSA padding for offline MFA in the PingID Adapter for PingFederate.
Affected: 11.1.0 through 11.1.5; 11.2.0 through 11.2.2
CVE-2024-22377
5.3
0%
Jul 9
PingFederate Runtime Node Path Traversal
Affected: 10.3.0 through 10.3.13; 11.0.0 through 11.0.9; 11.1.0 through 11.1.9; 11.2.0 through 11.2.8; 11.3.0 through 11.3.4; 12.0.0
CVE-2024-22477
4.3
0%
Jul 9
PingFederate OIDC Policy Management Editor Cross-Site Scripting
Affected: 10.3.0 through 10.3.13; 11.0.0 through 11.0.9; 11.1.0 through 11.1.9; 11.2.0 through 11.2.8; 11.3.0 through 11.3.4; 12.0.0
CVE-2023-34085
4.3
1%
Oct 25
User Attribute Disclosure via DynamoDB Data Stores
Affected: through 11.3.0
Showing 8