EUVD-2025-209288

An insufficient granularity of access control vulnerability exists in PingIDM formerly ForgeRock Identity Management where administrators cannot properly configure access rules for Remote Connector Servers RCS running in client mode. This means attackers can spoof a client-mode RCS if one exists ...

EUVD-2021-25632

Malware in sbrugna...

EUVD-2020-3101

Malware in sbrugna...

EUVD-2019-5019

Malware in sbrugna...

EUVD-2018-13838

Malware in sbrugna...

EUVD-2021-18796

Malware in sbrugna...

EUVD-2024-20834

Malicious code in bioql PyPI...

EUVD-2025-5090

Malicious code in bioql PyPI...

EUVD-2021-27509

Malicious code in bioql PyPI...

EUVD-2021-28778

Malicious code in bioql PyPI...

PT-2025-25500 · Ping Identity · Pingfederate Administrative Console

Name of the Vulnerable Software and Affected Versions: PingFederate Administrative Console affected versions not specified Description: The issue concerns unsanitized user-supplied data saved in the PingFederate Administrative Console, which could trigger the execution of JavaScript code in...

CVE-2021-39270

In Ping Identity RSA SecurID Integration Kit before 3.2, user impersonation can occur...

CVE-2021-31923

Ping Identity PingAccess before 5.3.3 allows HTTP request smuggling via header manipulation...

CVE-2019-13564

XSS exists in Ping Identity Agentless Integration Kit before 1.5...

CVE-2018-25084

A vulnerability, which was classified as problematic, has been found in Ping Identity Self-Service Account Manager 1.1.2. Affected by this issue is some unknown functionality of the file src/main/java/com/unboundid/webapp/ssam/SSAMController.java. The manipulation leads to cross site scripting. T...

Combat Rising Account Abuse: Akamai and Ping Identity Partner Up

...

CVE-2025-20059

Relative Path Traversal vulnerability in Ping Identity PingAM Java Policy Agent allows Parameter Injection.This issue affects PingAM Java Policy Agent: through 5.10.3, through 2023.11.1, through 2024.9...

CVE-2025-20059

Relative Path Traversal vulnerability in Ping Identity PingAM Java Policy Agent allows Parameter Injection.This issue affects PingAM Java Policy Agent: through 5.10.3, through 2023.11.1, through 2024.9...

CVE-2025-20059 PingAM Java Policy Agent path traversal

Relative Path Traversal vulnerability in Ping Identity PingAM Java Policy Agent allows Parameter Injection.This issue affects PingAM Java Policy Agent: through 5.10.3, through 2023.11.1, through 2024.9...

CVE-2025-20059

CVE-2025-20059 : Affected product is Ping Identity PingAM Java Policy Agent. The issue is a relative path traversal that enables parameter injection in PingAM Policy Agent components. Affects versions through 5.10.3, through 2023.11.1, and through 2024.9. Impact (as per CVSS metrics in the initia...