How many Ping Identity PingDirectory CVEs are in CISA KEV?

None of Ping Identity PingDirectory's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Ping Identity PingDirectory are affected?

27 distinct Ping Identity PingDirectory versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Ping Identity PingDirectory CVEs?

Ping Identity PingDirectory's CVEs most often map to these CWE weakness types: CWE-269 (Improper Privilege Management), CWE-401 (Missing Release of Memory after Effective Lifetime).

What is the average severity of Ping Identity PingDirectory CVEs?

The average CVSS base score across Ping Identity PingDirectory's scored CVEs is 7.5.

RadicalNotion.AI

Log in Start free

Ping Identity

2 CVEs

Ping Identity PingDirectory Vulnerabilities

Name: Ping Identity PingDirectory vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for PingDirectory by Ping Identity.

2

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.5

Avg CVSS

2024–2026

Last updated June 12, 2026

Overview

Ping Identity PingDirectory has 2 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Ping Identity PingDirectory, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Ping Identity PingDirectory's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Ping Identity PingDirectory's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Ping Identity PingDirectory CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Ping Identity PingDirectory version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

10.1.0.0 <= v <= 10.1.0.51 CVE
10.2.0.0 <= v <= 10.2.0.51 CVE
10.3.0.0 <= v <= 10.3.0.31 CVE
11.0.0.0 <= v < 11.0.0.11 CVE
8.3 <= v <= 8.3.0.81 CVE
8.3.0.0 <= v <= 8.3.0.81 CVE
9.0 <= v <= 9.0.0.51 CVE
9.0.0.0 <= v <= 9.0.0.51 CVE
9.1 <= v <= 9.1.0.21 CVE
9.1.0.0 <= v <= 9.1.0.21 CVE
9.2 <= v <= 9.2.0.11 CVE
9.2.0.0 <= v <= 9.2.0.01 CVE
9.2.0.1 <= v <= 9.2.0.11 CVE
9.3 <= v < 9.3.0.11 CVE
9.3.0.0 <= v <= 9.3.0.01 CVE
9.3.0.0 <= v <= 9.3.0.81 CVE
9.3.0.1 <= v <= 9.3.0.11 CVE

Fixed in

> 10.1.0.51 CVE
> 10.2.0.51 CVE
> 10.3.0.31 CVE
> 8.3.0.81 CVE
> 9.0.0.51 CVE
> 9.1.0.21 CVE
> 9.2.0.11 CVE
> 9.3.0.81 CVE
11.0.0.11 CVE
9.3.0.11 CVE

Find a version

2 CVEs

Sort

PingDirectory copying of virtual attributes leads to memory exhaustion
CVE-2026-20746
Patch
CWE-401
Medium · CVSS 6.3
EPSS 0.3% (20th pct)2026-06-12
Delegated Admin Virtual Attribute Provider Privilege Escalation
CVE-2023-36496
Patch
CWE-269
High · CVSS 8.8
EPSS 0.5% (42th pct)2024-02-01

Common weakness types

The CWE weakness categories most often found in Ping Identity PingDirectory CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Ping Identity PingDirectory CVEs were published each year.

2024

1

2026

1

Other Ping Identity products

Browse vulnerabilities for other products by Ping Identity.

PingFederate21 CVEs pingid integration for windows login9 CVEs PingID Windows Login8 CVEs pingaccess3 CVEs pingone mfa integration kit3 CVEs mod_auth_openidc2 CVEs pingid2 CVEs pingid integration kit2 CVEs

All Ping Identity vulnerabilities

Frequently asked questions

Common questions about Ping Identity PingDirectory vulnerabilities.

How many CVEs does Ping Identity PingDirectory have?: Ping Identity PingDirectory has 2 published CVE records since 2024.
How many Ping Identity PingDirectory CVEs are in CISA KEV?: None of Ping Identity PingDirectory's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Ping Identity PingDirectory vulnerabilities?: No Ping Identity PingDirectory CVEs currently have a tracked public exploit in this dataset.
Which versions of Ping Identity PingDirectory are affected?: 27 distinct Ping Identity PingDirectory versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Ping Identity PingDirectory CVEs?: Ping Identity PingDirectory's CVEs most often map to these CWE weakness types: CWE-269 (Improper Privilege Management), CWE-401 (Missing Release of Memory after Effective Lifetime).
What is the average severity of Ping Identity PingDirectory CVEs?: The average CVSS base score across Ping Identity PingDirectory's scored CVEs is 7.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Ping Identity PingDirectory vulnerabilities

Monitor new Ping Identity PingDirectory vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing