Skip to content
CVE PROGRAM SOURCE RECORD9.2 Critical

CVE-2025-20059

PingAM Java Policy Agent path traversal

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Ping Identity

Description

Relative Path Traversal vulnerability in Ping Identity PingAM Java Policy Agent allows Parameter Injection.This issue affects PingAM Java Policy Agent: through 5.10.3, through 2023.11.1, through 2024.9.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ping Identity PingAM Java Policy Agent

Default version status: affected

  • 0 to ≤ 5.10.3affected
  • 0 to ≤ 2023.11.1affected
  • 0 to ≤ 2024.9affected

References