PI
Product
Pingfederate
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 3Medium 8Low 0
Watch
Add Pingfederate to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-40724 | 8.8 | Apr 25 | Cross-Site Request Forgery on PingFederate Local Identity Profiles Endpoint. Affected: 10.3.0 through 10.3.11; 11.0.0 through 11.0.6; 11.1.0 through 11.1.5; 11.2.0 through 11.2.2 |
| CVE-2023-39219 | 7.5 | Oct 25 | Admin Console Denial of Service via Java class enumeration Affected: 10.3.0 through 10.3.12; 11.1.0 through 11.1.7; 11.2.0 through 11.2.6; 11.3.0 |
| CVE-2021-41770 | 7.5 | Oct 7 | Ping Identity PingFederate before 10.3.1 mishandles pre-parsing validation, leading to an XXE attack that can achieve XML file disclosure Affected: before 10.3.1 |
Showing 3