← All advisories

Low severity1.8NVD Advisory· Published Jul 9, 2024· Updated Jun 17, 2026

CVE-2024-22477

CVE-2024-22477

Description

A cross-site scripting vulnerability exists in the admin console OIDC Policy Management Editor. The impact is contained to admin console users only.

Affected products

4

Pingidentity/Pingfederate4 versions
cpe:2.3:a:pingidentity:pingfederate:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:pingidentity:pingfederate:*:*:*:*:*:*:*:*range: >=10.3.0,<=10.3.13
- cpe:2.3:a:pingidentity:pingfederate:12.0.0:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: 11.0.0

Patches

Vulnerability mechanics

References

1

docs.pingidentity.com/r/en-us/pingfederate-120/lwu1707324350083nvdBroken LinkVendor Advisory

News mentions

0

No linked articles in our index yet.