PingFederate
Security Risk Profile
12
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 4 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 10, 2024 to present
4
Total CVEs
0
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
4.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
12/100
low
Severity Distribution
Critical
0High
0Medium
2Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Code Injection
1
2
SSRF
1
Most Affected Products
1. PingFederate PingFederate2
2. PingFederate Google Adapter1
3. PingFederate REST API1
Recent Vulnerabilities
See more →CVE-2025-26862
CVSS 1.0low
PingFederate unexpected browser flow initiation in redirectless mode
10/27/2025🔧 No Patch
CVE-2025-22854
CVSS 6.9medium
Possible thread exhaustion from processing http responses in PingFederate Google Adapter
6/15/2025🔧 No Patch
CVE-2024-21832
CVSS 3.5low
PingFederate REST API Data Store Injection
7/9/2024🔧 No Patch
CVE-2023-40148
CVSS 6.5medium
PingFederate Server Side Request Forgery vulnerability
4/10/2024🔧 No Patch
Monitor PingFederate in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.