agentprime: ping-identity-pingfederate

agentprime: ping-identity-pingfederateEvery new CVE for ping-identity-pingfederate.https://agentprime.io/CVE-2026-20773: Improper Authorization in PingFederate Administrative Expression Evaluation Endpointhttps://agentprime.io/advisories/CVE-2026-20773/https://agentprime.io/advisories/CVE-2026-20773/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 10:43:20 GMTCVECVE-2025-32736: PingFederate Administrative Console CSRF weaknesseshttps://agentprime.io/advisories/CVE-2025-32736/https://agentprime.io/advisories/CVE-2025-32736/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 21:54:21 GMTCVECVE-2025-26862: PingFederate unexpected browser flow initiation in redirectless modehttps://agentprime.io/advisories/CVE-2025-26862/https://agentprime.io/advisories/CVE-2025-26862/CVSS 0.0 (None). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Oct 2025 14:39:41 GMTCVECVE-2024-25573: Stored Cross-Site Scripting in Administrative Console Contexthttps://agentprime.io/advisories/CVE-2024-25573/https://agentprime.io/advisories/CVE-2024-25573/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 15 Jun 2025 15:25:38 GMTCVECVE-2025-22854: Possible thread exhaustion from processing http responses in PingFederate Google Adapterhttps://agentprime.io/advisories/CVE-2025-22854/https://agentprime.io/advisories/CVE-2025-22854/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 15 Jun 2025 15:00:06 GMTCVECVE-2025-21085: PingFederate OAuth Grant attribute duplication may use excessive memoryhttps://agentprime.io/advisories/CVE-2025-21085/https://agentprime.io/advisories/CVE-2025-21085/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 15 Jun 2025 14:25:39 GMTCVECVE-2024-21832: PingFederate REST API Data Store Injectionhttps://agentprime.io/advisories/CVE-2024-21832/https://agentprime.io/advisories/CVE-2024-21832/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jul 2024 23:04:55 GMTCVECVE-2024-22377: PingFederate Runtime Node Path Traversalhttps://agentprime.io/advisories/CVE-2024-22377/https://agentprime.io/advisories/CVE-2024-22377/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jul 2024 23:03:27 GMTCVECVE-2024-22477: PingFederate OIDC Policy Management Editor Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-22477/https://agentprime.io/advisories/CVE-2024-22477/CVSS 1.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jul 2024 23:01:28 GMTCVECVE-2023-40148: PingFederate Server Side Request Forgery vulnerabilityhttps://agentprime.io/advisories/CVE-2023-40148/https://agentprime.io/advisories/CVE-2023-40148/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Apr 2024 00:03:31 GMTCVECVE-2023-40545: PingFederate OAuth client_secret_jwt Authentication Bypasshttps://agentprime.io/advisories/CVE-2023-40545/https://agentprime.io/advisories/CVE-2023-40545/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Feb 2024 17:27:42 GMTCVECVE-2023-34085: User Attribute Disclosure via DynamoDB Data Storeshttps://agentprime.io/advisories/CVE-2023-34085/https://agentprime.io/advisories/CVE-2023-34085/CVSS 2.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Oct 2023 02:03:56 GMTCVECVE-2023-39219: Admin Console Denial of Service via Java class enumerationhttps://agentprime.io/advisories/CVE-2023-39219/https://agentprime.io/advisories/CVE-2023-39219/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Oct 2023 01:44:44 GMTCVECVE-2023-37283: Authentication Bypass via HTML Form & Identifier First Adapterhttps://agentprime.io/advisories/CVE-2023-37283/https://agentprime.io/advisories/CVE-2023-37283/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Oct 2023 01:24:47 GMTCVECVE-2022-40724: Cross-Site Request Forgery on PingFederate Local Identity Profiles Endpoint.https://agentprime.io/advisories/CVE-2022-40724/https://agentprime.io/advisories/CVE-2022-40724/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Apr 2023 00:00:00 GMTCVECVE-2022-23722: PingFederate Password Reset via Authentication API Mishandlinghttps://agentprime.io/advisories/CVE-2022-23722/https://agentprime.io/advisories/CVE-2022-23722/Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 May 2022 22:05:13 GMTCVECVE-2021-42000: Ping Identity PingFederate Password Reset and Password Change Mishandling with an authentication policy in parallel reset flowshttps://agentprime.io/advisories/CVE-2021-42000/https://agentprime.io/advisories/CVE-2021-42000/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Feb 2022 22:30:11 GMTCVECVE-2021-40329: Ping Identity PingFederate: The Authentication API in Ping Identity PingFederate before 10.3 mishandles certain…https://agentprime.io/advisories/CVE-2021-40329/https://agentprime.io/advisories/CVE-2021-40329/Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Sep 2021 16:22:11 GMTCVE