Ping Identity Pingdirectory
2 CVEs affecting Ping Identity Pingdirectory. Latest disclosed: 2026-06-12. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-36496 | High | 7.7 | 2024-02-01 | Delegated Admin Privilege virtual attribute provider plugin, when enabled, allows an authenticated user to elevate their permissions in the Directory Server. |
CVE-2026-20746 | | 2026-06-12 | Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust java memory heap when recent login histo… |