Search vulnerabilities

Results 2

Export CSV
CVE-2024-23983

Access rules for PingAccess may be circumvented with URL-encoded characters

Improper handling of canonical URL-encoding may lead to bypass not properly constrained by request rules.

CVSS 4.0 · 5.8 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2021-31923

Ping Identity PingAccess before 5.3.3 allows HTTP request smuggling via header manipulation.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Products