Ping Identity Pingdirectory vulnerabilities

2 vulnerabilities

Known vulnerabilities in Ping Identity Pingdirectory, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.3CVE-2026-20746ping identitypingdirectory
EPSS score
0.28%
Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust java memory heap when recent login history is enabled and copying virtual attributes that reference ds-privilege-name values.8.8CVE-2023-36496ping identitypingdirectory+1
EPSS score
0.52%
Delegated Admin Privilege virtual attribute provider plugin, when enabled, allows an authenticated user to elevate their permissions in the Directory Server.