Ping Identity Pingam vulnerabilities

2 vulnerabilities

Known vulnerabilities in Ping Identity Pingam, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2024-25566forgerockaccess_management+1
EPSS score
0.24%
An Open-Redirect vulnerability exists in PingAM where well-crafted requests may cause improper validation of redirect URLs. This could allow an attacker to redirect end-users to malicious sites under their control, simplifying phishing attacks9.5CVE-2026-21391ping identitypingam
EPSS score
0.45%
An improper validation vulnerability exists within PingAM where a well-crafted request allows arbitrary or protected ID Token claims to be set or overridden. In certain configurations this could allow an attacker to bypass authentication controls via spoofing leading to privilege escalation or impersonation.