Vulnerabilities in Ping Identity
53 resultsCVE-2022-23720HIGHPingID Windows Login prior to 2.8 does not alert or halt operation if it has been provisioned with the full permissions PingID properties fileEPSS 0.2%CVE-2024-25566MEDIUMOpen Redirect in PingAMEPSS 0.2%CVE-2021-41994MEDIUMPingID iOS mobile application prior to 1.19 vulnerable to pre-computed dictionary attacksEPSS 0.2%CVE-2021-41993MEDIUMPingID Android mobile application prior to 1.19 vulnerable to pre-computed dictionary attacksEPSS 0.2%CVE-2022-23717MEDIUMPingID Windows Login prior to 2.8 denial of service conditionEPSS 0.2%CVE-2024-21832LOWPingFederate REST API Data Store InjectionEPSS 0.2%CVE-2025-20628MEDIUMInsufficient granularity of access control for Remote Connector Servers in client modeEPSS 0.2%CVE-2022-23725HIGHPingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstancesEPSS 0.2%CVE-2022-23721LOWPingID integration for Windows login duplicate username collision.EPSS 0.2%CVE-2025-32736MEDIUMPingFederate Administrative Console CSRF weaknessesEPSS 0.2%CVE-2022-40725HIGHPingID Desktop PIN attempt lockout bypass.EPSS 0.2%CVE-2022-40724MEDIUMCross-Site Request Forgery on PingFederate Local Identity Profiles Endpoint.EPSS 0.2%CVE-2024-22477LOWPingFederate OIDC Policy Management Editor Cross-Site ScriptingEPSS 0.2%