Vulnerabilities in Ping Identity
49 resultsVexday analysis
Ping Identity possui 49 CVEs registradas, com apenas 1 crítica e nenhuma sob exploração ativa conhecida, indicando postura de risco moderada. A fraqueza dominante é CWE-288 (autenticação inadequada), padrão recorrente que requer atenção em ciclos de desenvolvimento. O baixo volume de publicações recentes (1 em 90 dias) sugere que o risco atual é estável, sem deterioração acelerada.
CVE-2022-23717MEDIUMPingID Windows Login prior to 2.8 denial of service conditionEPSS 0.2%CVE-2021-41993MEDIUMPingID Android mobile application prior to 1.19 vulnerable to pre-computed dictionary attacksEPSS 0.2%CVE-2021-41994MEDIUMPingID iOS mobile application prior to 1.19 vulnerable to pre-computed dictionary attacksEPSS 0.2%CVE-2024-25566MEDIUMOpen Redirect in PingAMEPSS 0.2%CVE-2022-23721LOWPingID integration for Windows login duplicate username collision.EPSS 0.2%CVE-2022-23725HIGHPingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstancesEPSS 0.2%CVE-2022-40725HIGHPingID Desktop PIN attempt lockout bypass.EPSS 0.2%CVE-2022-40724MEDIUMCross-Site Request Forgery on PingFederate Local Identity Profiles Endpoint.EPSS 0.2%CVE-2024-22477LOWPingFederate OIDC Policy Management Editor Cross-Site ScriptingEPSS 0.2%