Log in Start free

Ping Identity

Products

ProductCVEsExploitedLatest
PingFederate18–Sep 14, 2026
PingID Windows Login6–Jun 30, 2022
PingAccess3–Nov 11, 2024
PingIDM2–Apr 7, 2026
PingOne MFA Integration Kit for PingFederate2–Jul 9, 2024
PingAM2–Sep 14, 2026
PingDirectory2–Jun 12, 2026
PingID Mobile Application2–Apr 30, 2022
PingID Radius PCV2–Oct 24, 2023
PingID Desktop for macOS1–Apr 25, 2023
PingID Desktop for Windows1–Apr 25, 2023
PingID Integration for Windows Login1–May 4, 2022
PingID Integration Kit (includes PingID Adapter)1–Apr 25, 2023
PingID Integration Kit (includes Radius PCV)1–Apr 25, 2023
PingID Mac Login1–Jun 30, 2022
PingOne MFA Integration Kit1–Oct 24, 2023
RSA SecurID Integration Kit1–Aug 18, 2021
One-Time Passcode Integration Kit for PingFederate1–Dec 4, 2025
unspecified1–Apr 25, 2023
PingAM Java Policy Agent1–Feb 20, 2025
PingCentral1–Sep 30, 2022
PingFederate (includes PingID Adapter)1–Apr 25, 2023
PingFederate (includes Radius PCV)1–Apr 25, 2023
PingFederate PingOne MFA Integration Kit1–May 2, 2022
PingGateway1–Oct 6, 2026
PingID Adapter for PingFederate1–Apr 25, 2023
PingID Desktop1–Apr 30, 2022

Exploited and recent CVEs

  • CVE-2026-80327 Medium 5.1 Open Redirect in PingGateway Fragment Filter 0.4%
  • CVE-2026-21391 Critical 9.5 Improper Claim Validation in PingAM OIDC Provider 0.6%
  • CVE-2026-20773 High 8.5 Improper Authorization in PingFederate Administrative Expression Evaluation Endpoint 0.4%
  • CVE-2025-32736 Medium 4.9 PingFederate Administrative Console CSRF weaknesses 0.2%
  • CVE-2026-20746 Medium 6.3 PingDirectory copying of virtual attributes leads to memory exhaustion 0.3%
  • CVE-2025-20628 Medium 6.9 Insufficient granularity of access control for Remote Connector Servers in client mode 0.2%
  • CVE-2025-27935 High 8.6 Authentication Bypass in OTP (One-time Passcode) IdP Adapter Integration Kit 0.4%
  • CVE-2025-26862 None 0.0 PingFederate unexpected browser flow initiation in redirectless mode 0.3%
  • CVE-2024-25573 Medium 6.9 Stored Cross-Site Scripting in Administrative Console Context 0.4%
  • CVE-2025-22854 Medium 6.9 Possible thread exhaustion from processing http responses in PingFederate Google Adapter 0.3%
  • CVE-2025-21085 Low 2.1 PingFederate OAuth Grant attribute duplication may use excessive memory 0.3%
  • CVE-2025-20059 Critical 9.1 PingAM Java Policy Agent path traversal 1.0%
  • CVE-2024-23983 Medium 5.8 Access rules for PingAccess may be circumvented with URL-encoded characters 0.4%
  • CVE-2024-25566 Medium 5.1 Open Redirect in PingAM 0.2%
  • CVE-2024-23600 Low 2.7 PingIDM Query Filter Vulnerability 0.7%
  • CVE-2024-21832 Low 3.5 PingFederate REST API Data Store Injection 0.2%
  • CVE-2024-22377 Medium 5.3 PingFederate Runtime Node Path Traversal 0.4%
  • CVE-2024-22477 Low 1.8 PingFederate OIDC Policy Management Editor Cross-Site Scripting 0.2%
  • CVE-2023-40356 High 8.7 PingOne MFA Integration Kit MFA bypass 0.4%
  • CVE-2023-40702 High 7.7 PingOne MFA Integration Kit MFA bypass 0.4%
  • CVE-2024-23316 High 8.8 PingAccess HTTP Request Desynchronization Weakness 0.5%
  • CVE-2023-40148 Medium 6.5 PingFederate Server Side Request Forgery vulnerability 0.5%
  • CVE-2023-40545 High 8.8 PingFederate OAuth client_secret_jwt Authentication Bypass 0.9%
  • CVE-2023-36496 High 7.7 Delegated Admin Virtual Attribute Provider Privilege Escalation 0.5%
  • CVE-2023-34085 Low 2.6 User Attribute Disclosure via DynamoDB Data Stores 0.6%
  • CVE-2023-39219 High 7.5 Admin Console Denial of Service via Java class enumeration 0.7%
  • CVE-2023-37283 High 8.1 Authentication Bypass via HTML Form & Identifier First Adapter 0.9%
  • CVE-2023-39930 High 7.5 PingFederate PingID Radius PCV Authentication Bypass 0.8%
  • CVE-2023-39231 High 7.3 PingFederate PingOne MFA IK Device Pairing Second Factor Authentication Bypass 0.7%
  • CVE-2022-23721 Low 3.8 PingID integration for Windows login duplicate username collision. 0.2%