Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-80327

Open Redirect in PingGateway Fragment Filter

An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This issue affects PingGateway versions 7.1.0 and later, 2023.2.0 through 2024.11.1, and 2025.3.0 through 2025.11.1. It is fixed in versions 2024.11.2, 2025.11.2, and 2026.3.0 (and later).

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Ping Identity
Products
Pinggateway
CVE-2026-20773

Improper Authorization in PingFederate Administrative Expression Evaluation Endpoint

A role-based access control issue was identified in the administrative expression evaluation functionality. This could allow users with certain administrative roles to access expression testing capabilities beyond their intended permissions.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Ping Identity
Products
Pingfederate
CVE-2025-32736

PingFederate Administrative Console CSRF weaknesses

Cross-Site Request Forgery weaknesses in the Administrative Console of PingFederate versions before version 13.1 may allow actors to perform unauthorized actions via specially-crafted links triggered by administrators with active sessions.

CVSS 4.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Ping Identity
Products
Pingfederate
CVE-2026-20746

PingDirectory copying of virtual attributes leads to memory exhaustion

Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust java memory heap when recent login history is enabled and copying virtual attributes that reference ds-privilege-name values.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Ping Identity Pingidentity
Products
Pingdirectory Pingdirectory