Vendor
Ping Identity vulnerabilities
62 advisories tracked, 1 exploited in the wild according to CISA, 6 published in 2026.
Data refreshed 13 Oct 2026
Patch now
Exploited in the last two years (CISA KEV), or a 10%+ chance of exploitation in the next 30 days (EPSS).
Nothing from Ping Identity meets this bar right now: no CVE in CISA's exploited list, and none with a high exploitation score.
Products covered
Select a product to see only its advisories.
- PingFederate and PingAccessThe federation server, its integration kits, PingAccess and PingCentral30 tracked
- PingIDMFA: the mobile app, desktop app, Windows and Mac login and RADIUS15 tracked
- PingAM, PingIDM and PingGatewayThe former ForgeRock stack: Access Management, Identity Management, Gateway and Directory19 tracked
All tracked advisories
Newest first. Full analysis marks the CVEs we've written up in depth; the rest link to an automatic summary.
| Published | CVE | Product | Issue | Severity | EPSS | Exploited |
|---|---|---|---|---|---|---|
| CVE-2026-80327 | PingAM, PingIDM and PingGateway | Open Redirect in PingGateway Fragment Filter | MEDIUM 5.1 | 0.38% | – | |
| CVE-2026-21391 | PingAM, PingIDM and PingGateway | Improper Claim Validation in PingAM OIDC Provider | CRITICAL 9.5 | 0.45% | – | |
| CVE-2026-20773 | PingFederate and PingAccess | Improper Authorization in PingFederate Administrative Expression Evaluation Endpoint | HIGH 8.5 | 0.21% | – | |
| CVE-2025-32736 | PingFederate and PingAccess | PingFederate Administrative Console CSRF weaknesses | MEDIUM 4.9 | 0.21% | – | |
| CVE-2026-20746 | PingAM, PingIDM and PingGateway | PingDirectory copying of virtual attributes leads to memory exhaustion | MEDIUM 6.3 | 0.28% | – | |
| CVE-2025-20628 | PingAM, PingIDM and PingGateway | Insufficient granularity of access control for Remote Connector Servers in client mode | MEDIUM 6.9 | 0.24% | – | |
| CVE-2025-27935 | PingFederate and PingAccess | Authentication Bypass in OTP (One-time Passcode) IdP Adapter Integration Kit | HIGH 8.6 | 0.51% | – | |
| CVE-2025-26862 | PingFederate and PingAccess | PingFederate unexpected browser flow initiation in redirectless mode | NONE 0 | 0.28% | – | |
| CVE-2024-25573 | PingFederate and PingAccess | Stored Cross-Site Scripting in Administrative Console Context | MEDIUM 6.9 | 0.37% | – | |
| CVE-2025-22854 | PingFederate and PingAccess | Possible thread exhaustion from processing http responses in PingFederate Google Adapter | MEDIUM 6.9 | 0.33% | – | |
| CVE-2025-21085 | PingFederate and PingAccess | PingFederate OAuth Grant attribute duplication may use excessive memory | LOW 2.1 | 0.33% | – | |
| CVE-2025-20059 | PingAM, PingIDM and PingGateway | PingAM Java Policy Agent path traversal | CRITICAL 9.2 | 0.95% | – | |
| CVE-2024-23983 | PingFederate and PingAccess | Access rules for PingAccess may be circumvented with URL-encoded characters | MEDIUM 5.8 | 0.43% | – | |
| CVE-2024-25566 | PingAM, PingIDM and PingGateway | Open Redirect in PingAM | MEDIUM 5.1 | 0.24% | – | |
| CVE-2024-23600 | PingAM, PingIDM and PingGateway | PingIDM Query Filter Vulnerability | LOW 2.7 | 0.67% | – | |
| CVE-2024-21832 | PingFederate and PingAccess | PingFederate REST API Data Store Injection | LOW 3.5 | 0.24% | – | |
| CVE-2024-22377 | PingFederate and PingAccess | PingFederate Runtime Node Path Traversal | MEDIUM 5.3 | 0.44% | – | |
| CVE-2024-22477 | PingFederate and PingAccess | PingFederate OIDC Policy Management Editor Cross-Site Scripting | LOW 1.8 | 0.17% | – | |
| CVE-2023-40356 | PingFederate and PingAccess | PingOne MFA Integration Kit MFA bypass | HIGH 8.7 | 0.40% | – | |
| CVE-2023-40702 | PingFederate and PingAccess | PingOne MFA Integration Kit MFA bypass | HIGH 7.7 | 0.40% | – | |
| CVE-2024-23316 | PingFederate and PingAccess | PingAccess HTTP Request Desynchronization Weakness | HIGH 8.8 | 0.55% | – | |
| CVE-2023-40148 | PingFederate and PingAccess | PingFederate Server Side Request Forgery vulnerability | MEDIUM 6.5 | 0.46% | – | |
| CVE-2023-0582 | PingAM, PingIDM and PingGateway | Path Traversal in ForgeRock Access Managment | HIGH 8.1 | 0.78% | – | |
| CVE-2023-40545 | PingFederate and PingAccess | PingFederate OAuth client_secret_jwt Authentication Bypass | HIGH 8.8 | 0.93% | – | |
| CVE-2023-36496 | PingAM, PingIDM and PingGateway | Delegated Admin Virtual Attribute Provider Privilege Escalation | HIGH 7.7 | 0.52% | – | |
| CVE-2023-34085 | PingFederate and PingAccess | User Attribute Disclosure via DynamoDB Data Stores | LOW 2.6 | 0.47% | – | |
| CVE-2023-39219 | PingFederate and PingAccess | Admin Console Denial of Service via Java class enumeration | HIGH 7.5 | 0.59% | – | |
| CVE-2023-37283 | PingFederate and PingAccess | Authentication Bypass via HTML Form & Identifier First Adapter | HIGH 8.1 | 0.75% | – | |
| CVE-2023-39930 | PingID | PingFederate PingID Radius PCV Authentication Bypass | HIGH 7.5 | 0.69% | – | |
| CVE-2023-39231 | PingFederate and PingAccess | PingFederate PingOne MFA IK Device Pairing Second Factor Authentication Bypass | HIGH 7.3 | 0.53% | – | |
| CVE-2022-40722 | PingFederate and PingAccess | Misconfiguration of RSA padding for offline MFA in the PingID Adapter for PingFederate. | HIGH 7.7 | 0.33% | – | |
| CVE-2022-40723 | PingFederate and PingAccess | Configuration-based MFA Bypass in PingID RADIUS PCV. | MEDIUM 6.5 | 0.52% | – | |
| CVE-2022-40724 | PingFederate and PingAccess | Cross-Site Request Forgery on PingFederate Local Identity Profiles Endpoint. | MEDIUM 6.4 | 0.18% | – | |
| CVE-2022-40725 | PingID | PingID Desktop PIN attempt lockout bypass. | HIGH 7.3 | 0.19% | – | |
| CVE-2022-3748 | PingAM, PingIDM and PingGateway | Improper authorization that can lead to account impersonation | CRITICAL 9.8 | 0.91% | – | |
| CVE-2018-25084 | PingAM, PingIDM and PingGateway | Ping Identity Self-Service Account Manager SSAMController.java cross site scripting | LOW 3.5 | 0.52% | – | |
| CVE-2023-1656 | PingAM, PingIDM and PingGateway | When the LDAP connector is started with StartTLS configured, LDAP BIND credentials are transmitted insecurely, prior to establishing the TLS connection. | HIGH 7.5 | 0.35% | – | |
| CVE-2023-0511 | PingAM, PingIDM and PingGateway | AM Java Policy Agent path traversal | CRITICAL 9.1 | 0.97% | – | |
| CVE-2023-0339 | PingAM, PingIDM and PingGateway | AM Web Policy Agent path traversal | CRITICAL 9.1 | 0.97% | – | |
| CVE-2022-24669 | PingAM, PingIDM and PingGateway | Anonymous users can register / de-register for configuration change notifications | MEDIUM 6.5 | 0.40% | – | |
| CVE-2022-24670 | PingAM, PingIDM and PingGateway | Any user can run unrestricted LDAP queries against a configuration endpoint | HIGH 7.1 | 0.60% | – | |
| CVE-2022-23726 | PingFederate and PingAccess | PingCentral versions prior to listed versions expose Spring Boot actuator endpoints that with administrativ… | MEDIUM 5.4 | 0.69% | – | |
| CVE-2022-0143 | PingAM, PingIDM and PingGateway | When startTLS is used then LDAP connector ignores the wrong password | CRITICAL 9.3 | 0.66% | – | |
| CVE-2022-23725 | PingID | PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances | HIGH 7.7 | 0.21% | – | |
| CVE-2022-23720 | PingID | PingID Windows Login prior to 2.8 does not alert or halt operation if it has been provisioned with the full permissions PingID properties file | HIGH 7.5 | 0.24% | – | |
| CVE-2022-23719 | PingID | PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests | HIGH 7.2 | 0.29% | – | |
| CVE-2022-23718 | PingID | PingID Windows Login prior to 2.8 uses known vulnerable components that can lead to remote code execution | HIGH 7.6 | 2.1% | – | |
| CVE-2022-23717 | PingID | PingID Windows Login prior to 2.8 denial of service condition | MEDIUM 5 | 0.23% | – | |
| CVE-2021-41995 | PingID | PingID Mac Login prior to 1.1 vulnerable to pre-computed dictionary attacks | HIGH 7.7 | 0.78% | – | |
| CVE-2022-23724 | PingID | PingID Integration for Windows Login MFA Bypass | MEDIUM 6.4 | 0.45% | – | |
| CVE-2022-23723 | PingFederate and PingAccess | PingFederate PingOneMFA Integration Kit MFA Bypass | HIGH 7.7 | 0.88% | – | |
| CVE-2022-23722 | PingFederate and PingAccess | PingFederate Password Reset via Authentication API Mishandling | – | 0.61% | – | |
| CVE-2021-42001 | PingID | PingID Desktop encryption libraries misconfiguration can lead to sensitive data exposure | HIGH 8 | 0.51% | – | |
| CVE-2021-41994 | PingID | PingID iOS mobile application prior to 1.19 vulnerable to pre-computed dictionary attacks | MEDIUM 6.6 | 0.24% | – | |
| CVE-2021-41993 | PingID | PingID Android mobile application prior to 1.19 vulnerable to pre-computed dictionary attacks | MEDIUM 6.6 | 0.24% | – | |
| CVE-2021-41992 | PingID | PingID Windows Login RSA cryptographic weakness with possible offline MFA bypass | HIGH 7.7 | 0.50% | – | |
| CVE-2021-42000 | PingFederate and PingAccess | Ping Identity PingFederate Password Reset and Password Change Mishandling with an authentication policy in parallel reset flows | MEDIUM 5.3 | 0.53% | – | |
| CVE-2021-4201 | PingAM, PingIDM and PingGateway | Pre-authentication session hijacking | CRITICAL 9.6 | 2.0% | – | |
| CVE-2021-40329 | PingFederate and PingAccess | The Authentication API in Ping Identity PingFederate before 10.3 mishandles certain aspects of external pas… | – | 1.1% | – | |
| CVE-2021-31923 | PingFederate and PingAccess | Ping Identity PingAccess before 5.3.3 allows HTTP request smuggling via header manipulation. | – | 0.71% | – | |
| CVE-2021-39270 | PingFederate and PingAccess | In Ping Identity RSA SecurID Integration Kit before 3.2, user impersonation can occur. | – | 0.41% | – | |
| CVE-2021-35464 | PingAM, PingIDM and PingGateway | ForgeRock Access Management (AM) Core Server Remote Code Execution | CRITICAL 9.8 | 100% | Yes · ransomware |
Sources: Ping Identity security advisories, CISA KEV and FIRST EPSS. Severity is the vendor's own rating.