Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

PingFederate Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Published	Severity

`CVE-2026-20773`Improper Authorization in PingFederate Administrative Expression Evaluation Endpoint	Exploitation statusNot known exploited	FixYes	Published09/14/2026	SeverityHigh
`CVE-2025-32736`PingFederate Administrative Console CSRF weaknesses	Exploitation statusNot known exploited	FixYes	Published08/10/2026	SeverityMedium
`CVE-2025-26862`PingFederate unexpected browser flow initiation in redirectless mode	Exploitation statusNot known exploited	FixYes	Published10/27/2025	SeverityInformational
`CVE-2024-25573`Stored Cross-Site Scripting in Administrative Console Context	Exploitation statusNot known exploited	FixYes	Published06/15/2025	SeverityMedium
`CVE-2025-22854`Possible thread exhaustion from processing http responses in PingFederate Google Adapter	Exploitation statusNot known exploited	FixYes	Published06/15/2025	SeverityMedium
`CVE-2025-21085`PingFederate OAuth Grant attribute duplication may use excessive memory	Exploitation statusNot known exploited	FixYes	Published06/15/2025	SeverityLow
`CVE-2024-21832`PingFederate REST API Data Store Injection	Exploitation statusNot known exploited	FixYes	Published07/09/2024	SeverityLow
`CVE-2024-22377`PingFederate Runtime Node Path Traversal	Exploitation statusNot known exploited	FixYes	Published07/09/2024	SeverityMedium
`CVE-2024-22477`PingFederate OIDC Policy Management Editor Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Published07/09/2024	SeverityLow
`CVE-2023-40148`PingFederate Server Side Request Forgery vulnerability	Exploitation statusNot known exploited	FixYes	Published04/10/2024	SeverityMedium
`CVE-2023-40545`PingFederate OAuth client_secret_jwt Authentication Bypass	Exploitation statusNot known exploited	FixYes	Published02/06/2024	SeverityHigh
`CVE-2023-34085`User Attribute Disclosure via DynamoDB Data Stores	Exploitation statusNot known exploited	FixYes	Published10/25/2023	SeverityLow
`CVE-2023-39219`Admin Console Denial of Service via Java class enumeration	Exploitation statusNot known exploited	FixYes	Published10/25/2023	SeverityHigh
`CVE-2023-37283`Authentication Bypass via HTML Form & Identifier First Adapter	Exploitation statusNot confirmed	FixYes	Published10/25/2023	SeverityHigh
`CVE-2022-40724`Cross-Site Request Forgery on PingFederate Local Identity Profiles Endpoint.	Exploitation statusNot known exploited	FixYes	Published04/25/2023	SeverityMedium
`CVE-2022-23722`PingFederate Password Reset via Authentication API Mishandling	Exploitation statusNot confirmed	FixNot confirmed	Published05/02/2022	SeverityUnknown
`CVE-2021-42000`Ping Identity PingFederate Password Reset and Password Change Mishandling with an authentication policy in parallel reset flows	Exploitation statusNot confirmed	FixYes	Published02/10/2022	SeverityMedium
`CVE-2021-40329`	Exploitation statusNot confirmed	FixNot confirmed	Published09/27/2021	SeverityUnknown

18 / 18 Results

All vulnerabilities loaded

Security vulnerabilities in PingFederate

PingFederate

How many security vulnerabilities does PingFederate currently have?

Does the latest version of PingFederate have any known vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management