PI
Vendor
Ping Identity
30
CVEs
0
On KEV
1
New 30D
Products
PI5.1
PingGateway
Ping Identity
1 CVEs0 on KEV1 new
PI9.8
PingFederate
Ping Identity
14 CVEs0 on KEV0 new
PI8.8
PingAccess
Ping Identity
2 CVEs0 on KEV0 new
PI9.5
PingAM
Ping Identity
2 CVEs0 on KEV0 new
PI8.8
PingDirectory
Ping Identity
2 CVEs0 on KEV0 new
PI6.9
PingIDM
Ping Identity
2 CVEs0 on KEV0 new
PM8.7
PingOne MFA Integration Kit for PingFederate
Ping Identity
2 CVEs0 on KEV0 new
OP8.6
One-Time Passcode Integration Kit for PingFederate
Ping Identity
1 CVEs0 on KEV0 new
PJ9.1
PingAM Java Policy Agent
Ping Identity
1 CVEs0 on KEV0 new
PI4.9
PingCentral
Ping Identity
1 CVEs0 on KEV0 new
PR9.8
PingID Radius PCV
Ping Identity
1 CVEs0 on KEV0 new
PM6.5
PingOne MFA Integration Kit
Ping Identity
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-80327 | PI PingGateway Ping Identity | 5.1 | Oct 6 | Open Redirect in PingGateway Fragment Filter |
| CVE-2026-21391 | PI PingAM Ping Identity | 9.5 | Sep 14 | Improper Claim Validation in PingAM OIDC Provider |
| CVE-2026-20773 | PI PingFederate Ping Identity | 8.5 | Sep 14 | Improper Authorization in PingFederate Administrative Expression Evaluation Endpoint |
| CVE-2025-32736 | PI PingFederate Ping Identity | 4.9 | Aug 10 | PingFederate Administrative Console CSRF weaknesses |
| CVE-2026-20746 | PI PingDirectory Ping Identity | 6.3 | Jun 12 | PingDirectory copying of virtual attributes leads to memory exhaustion |
| CVE-2025-20628 | PI PingIDM Ping Identity | 6.9 | Apr 7 | Insufficient granularity of access control for Remote Connector Servers in client mode |
| CVE-2025-27935 | OP One-Time Passcode Integration Kit for PingFederate Ping Identity | 8.6 | Dec 4 | Authentication Bypass in OTP (One-time Passcode) IdP Adapter Integration Kit |
| CVE-2025-26862 | PI PingFederate Ping Identity | 0.0 | Oct 27 | PingFederate unexpected browser flow initiation in redirectless mode |
| CVE-2024-25573 | PI PingFederate Ping Identity | 6.9 | Jun 15 | Stored Cross-Site Scripting in Administrative Console Context |
| CVE-2025-22854 | PI PingFederate Ping Identity | 6.9 | Jun 15 | Possible thread exhaustion from processing http responses in PingFederate Google Adapter |
| CVE-2025-21085 | PI PingFederate Ping Identity | 2.1 | Jun 15 | PingFederate OAuth Grant attribute duplication may use excessive memory |
| CVE-2025-20059 | PJ PingAM Java Policy Agent Ping Identity | 9.1 | Feb 20 | PingAM Java Policy Agent path traversal |
| CVE-2024-23983 | PI PingAccess Ping Identity | 5.8 | Nov 11 | Access rules for PingAccess may be circumvented with URL-encoded characters |
| CVE-2024-25566 | PI PingAM Ping Identity | 6.1 | Oct 29 | Open Redirect in PingAM |
| CVE-2024-23600 | PI PingIDM Ping Identity | 2.7 | Aug 1 | PingIDM Query Filter Vulnerability |
| CVE-2024-21832 | PI PingFederate Ping Identity | 3.5 | Jul 9 | PingFederate REST API Data Store Injection |
| CVE-2024-22377 | PI PingFederate Ping Identity | 5.3 | Jul 9 | PingFederate Runtime Node Path Traversal |
| CVE-2024-22477 | PI PingFederate Ping Identity | 4.3 | Jul 9 | PingFederate OIDC Policy Management Editor Cross-Site Scripting |
| CVE-2023-40356 | PM PingOne MFA Integration Kit for PingFederate Ping Identity | 8.7 | Jul 9 | PingOne MFA Integration Kit MFA bypass |
| CVE-2023-40702 | PM PingOne MFA Integration Kit for PingFederate Ping Identity | 7.7 | Jul 9 | PingOne MFA Integration Kit MFA bypass |
| CVE-2024-23316 | PI PingAccess Ping Identity | 8.8 | May 31 | PingAccess HTTP Request Desynchronization Weakness |
| CVE-2023-40148 | PI PingFederate Ping Identity | 6.5 | Apr 10 | PingFederate Server Side Request Forgery vulnerability |
| CVE-2023-40545 | PI PingFederate Ping Identity | 9.8 | Feb 6 | PingFederate OAuth client_secret_jwt Authentication Bypass |
| CVE-2023-36496 | PI PingDirectory Ping Identity | 8.8 | Feb 1 | Delegated Admin Virtual Attribute Provider Privilege Escalation |
| CVE-2023-34085 | PI PingFederate Ping Identity | 4.3 | Oct 25 | User Attribute Disclosure via DynamoDB Data Stores |
| CVE-2023-39219 | PI PingFederate Ping Identity | 7.5 | Oct 25 | Admin Console Denial of Service via Java class enumeration |
| CVE-2023-37283 | PI PingFederate Ping Identity | 9.8 | Oct 25 | Authentication Bypass via HTML Form & Identifier First Adapter |
| CVE-2023-39930 | PR PingID Radius PCV Ping Identity | 9.8 | Oct 24 | PingFederate PingID Radius PCV Authentication Bypass |
| CVE-2023-39231 | PM PingOne MFA Integration Kit Ping Identity | 6.5 | Oct 24 | PingFederate PingOne MFA IK Device Pairing Second Factor Authentication Bypass |
| CVE-2022-23726 | PI PingCentral Ping Identity | 4.9 | Sep 30 | PingCentral versions prior to listed versions expose Spring Boot actuator endpoints that with administrative authentication return large amounts of sensitive environmental and… |