Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-20773 1 Ping Identity 1 Pingfederate 2026-09-14 N/A
A role-based access control issue was identified in the administrative expression evaluation functionality. This could allow users with certain administrative roles to access expression testing capabilities beyond their intended permissions.
CVE-2025-32736 1 Ping Identity 1 Pingfederate 2026-08-28 N/A
Cross-Site Request Forgery weaknesses in the Administrative Console of PingFederate versions before version 13.1 may allow actors to perform unauthorized actions via specially-crafted links triggered by administrators with active sessions.