CVE-2025-20059criticalCWE-23

CVE-2025-20059: critical vulnerability in PingAM Java Policy Agent

PingAM Java Policy Agent path traversal

Published

Follow this CVE+ Monitor PingAM Java Policy Agent

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.2epss 1.0%
Relative Path Traversal vulnerability in Ping Identity PingAM Java Policy Agent allows Parameter Injection.This issue affects PingAM Java Policy Agent: through 5.10.3, through 2023.11.1, through 2024.9.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:L/SI:H/SA:N
Affected products
Ping Identity · PingAM Java Policy Agent