CVE-2024-22477中 4.3A cross-site scripting vulnerability exists in the admin console OIDC Policy Management Editor. The impact is contained to admin console use…
CVE-2024-22377中 5.3The deploy directory in PingFederate runtime nodes is reachable to unauthorized users.
CVE-2023-40545緊急 9.8Authentication bypass when an OAuth2 Client is using client_secret_jwt as its authentication method on affected 11.3 versions via specially …
CVE-2023-39219高 7.5PingFederate Administrative Console dependency contains a weakness where console becomes unresponsive with crafted Java class loading enumer…
CVE-2023-37283緊急 9.8Under a very specific and highly unrecommended configuration, authentication bypass is possible in the PingFederate Identifier First Adapter…