CVE-2024-22377

The deploy directory in PingFederate runtime nodes is reachable to unauthorized users.

CVE-2024-22477

A cross-site scripting vulnerability exists in the admin console OIDC Policy Management Editor. The impact is contained to admin console users only.