ping identity
Security Risk Profile
57
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 6 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 31, 2024 to present
6
Total CVEs
2
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
6.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
57/100
medium
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
1High
1Medium
3Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
CSRF
1
2
Path Traversal
1
Most Affected Products
1. Ping Identity PingFederate Administrative Console1
2. Ping Identity PingDirectory1
3. Ping Identity PingIDM1
4. Ping Identity PingFederate1
5. Ping Identity PingAM Java Policy Agent1
Recent Vulnerabilities
See more →CVE-2025-32736
CVSS 4.9medium
PingFederate Administrative Console CSRF weaknesses
8/10/2026🔧 No Patch
CVE-2026-20746
CVSS 6.3medium
PingDirectory copying of virtual attributes leads to memory exhaustion
6/12/2026🔧 No Patch
CVE-2025-20628
CVSS 6.9medium
Insufficient granularity of access control for Remote Connector Servers in client mode
4/7/2026🔧 No Patch
CVE-2025-21085
CVSS 2.1low
PingFederate OAuth Grant attribute duplication may use excessive memory
6/15/2025🔧 No Patch
CVE-2025-20059
CVSS 9.2critical
PingAM Java Policy Agent path traversal
2/20/2025🔧 No Patch
CVE-2024-23316
CVSS 8.8high
PingAccess HTTP Request Desynchronization Weakness
5/31/2024🔧 No Patch
Monitor ping identity in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.