Ping Identity vulnerabilities
We track 16 vulnerabilities in Ping Identity products across 11 products. 16 are rated high or critical, and none are known to be exploited. The most recent was published on September 14, 2026.
Latest Ping Identity vulnerabilities
- 9.5 Critical severity
PingAM: Authentication Bypass by Spoofing
An improper validation vulnerability exists within PingAM where a well-crafted request allows arbitrary or protected ID Token claims to be set or overridden. In certain configurations this could allow an attacker to bypass authentication controls via spoofing
- 8.5 High severity
PingFederate: Incorrect Authorization
A role-based access control issue was identified in the administrative expression evaluation functionality. This could allow users with certain administrative roles to access expression testing capabilities beyond their intended permissions.
- 8.6 High severity
One-Time Passcode Integration Kit for…: Missing Authentication for Critical Functionality
The OTP Integration Kit for PingFederate fails to enforce HTTP method validation and state validation properly. The server advances the authentication state without verifying the OTP, thereby bypassing multi-factor authentication.
- 9.2 Critical severity
PingAM Java Policy Agent: Relative Path Traversal
Relative Path Traversal vulnerability in Ping Identity PingAM Java Policy Agent allows Parameter Injection.This issue affects PingAM Java Policy Agent: through 5.10.3, through 2023.11.1, through 2024.9.
- 7.7 High severity
PingOne MFA Integration Kit for PingFederate: Authentication Bypass by Spoofing
PingOne MFA Integration Kit contains a vulnerability where the skipMFA action can be configured such that user authentication does not require the second factor authentication from the user's existing registered devices. A threat actor might be able to exploit
- 8.7 High severity
PingOne MFA Integration Kit for PingFederate: Authentication Bypass by Spoofing
PingOne MFA Integration Kit contains a vulnerability related to the Prompt Users to Set Up MFA configuration. Under certain conditions, this configuration could allow for a new MFA device to be paired with a target user account without requiring second-factor
- 8.8 High severity
PingAccess: Inconsistent Interpretation of HTTP Requests
HTTP request desynchronization in Ping Identity PingAccess, all versions prior to 8.0.1 affected allows an attacker to send specially crafted http header requests to create a request smuggling condition for proxied requests.
- 9.8 Critical severity
PingFederate: Missing Authentication for Critical Functionality
Authentication bypass when an OAuth2 Client is using client_secret_jwt as its authentication method on affected 11.3 versions via specially crafted requests.
- 8.8 High severity
PingDirectory: Improper Privilege Management
Delegated Admin Privilege virtual attribute provider plugin, when enabled, allows an authenticated user to elevate their permissions in the Directory Server.
- 9.8 Critical severity
PingID Radius PCV: Missing Authentication for Critical Functionality
A first-factor authentication bypass vulnerability exists in the PingFederate with PingID Radius PCV when a MSCHAP authentication request is sent via a maliciously crafted RADIUS client request.
- 7.5 High severity
PingFederate: Uncontrolled Resource Consumption
PingFederate Administrative Console dependency contains a weakness where console becomes unresponsive with crafted Java class loading enumeration requests
- 8.8 High severity
PingFederate: Cross-Site Request Forgery
The PingFederate Local Identity Profiles '/pf/idprofile.ping' endpoint is vulnerable to Cross-Site Request Forgery (CSRF) through crafted GET requests.
- 8.2 High severity
PingID Windows Login: Improper Privilege Management
PingID Windows Login prior to 2.8 does not alert or halt operation if it has been provisioned with the full permissions PingID properties file. An IT administrator could mistakenly deploy administrator privileged PingID API credentials, such as those typically
- 8.1 High severity
PingID Windows Login prior to 2.8 uses known vulnerable components that can lead to remote…
PingID Windows Login prior to 2.8 uses known vulnerable components that can lead to remote code execution. An attacker capable of achieving a sophisticated man-in-the-middle position, or to compromise Ping Identity web servers, could deliver malicious code tha
- 8.1 High severity
PingID Integration for Windows Login: Use of Hard-coded Credentials
Use of static encryption key material allows forging an authentication token to other users within a tenant organization. MFA may be bypassed by redirecting an authentication flow to a target user. To exploit the vulnerability, must have compromised user crede
- 7.7 High severity
PingFederate PingOne MFA Integration Kit: Improper Authentication
An MFA bypass vulnerability exists in the PingFederate PingOne MFA Integration Kit when adapter HTML templates are used as part of an authentication flow.