← CVE Intelligence

CVE-2024-22477

PingFederate OIDC Policy Management Editor Cross-Site Scripting PUBLISHED

Description (CNA)

A cross-site scripting vulnerability exists in the admin console OIDC Policy Management Editor. The impact is contained to admin console users only.

Affected (CNA)

Vendor / productVersions
Ping Identity / PingFederateaffected 11.0.0 through 11.0.9; affected 11.1.0 through 11.1.9; affected 11.2.0 through 11.2.8; affected 11.3.0 through 11.3.4; affected 12.0.0; affected 10.3.0 through 10.3.13

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.