Lucene search
PingidentityPingfederate*
2 matches found
CVE-2021-41770
Ping Identity PingFederate before 10.3.1 mishandles pre-parsing validation, leading to an XXE attack that can achieve XML file disclosure.
7.5CVSS7.9AI score0.0028EPSS
CVE-2021-40329
The Authentication API in Ping Identity PingFederate before 10.3 mishandles certain aspects of external password management.
9.8CVSS9.5AI score0.00404EPSS