Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-20773

Improper Authorization in PingFederate Administrative Expression Evaluation Endpoint

A role-based access control issue was identified in the administrative expression evaluation functionality. This could allow users with certain administrative roles to access expression testing capabilities beyond their intended permissions.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Ping Identity
Products
Pingfederate
CVE-2025-32736

PingFederate Administrative Console CSRF weaknesses

Cross-Site Request Forgery weaknesses in the Administrative Console of PingFederate versions before version 13.1 may allow actors to perform unauthorized actions via specially-crafted links triggered by administrators with active sessions.

CVSS 4.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Ping Identity
Products
Pingfederate