CVE Intelligence

Ping Identity PingDirectory vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ping Identity PingDirectory: 1 record(s), with affected versions and fixes.

CVE-2026-20746 Medium · 6.3 CWE-401 Jun 12, 2026
PingDirectory copying of virtual attributes leads to memory exhaustion
Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust java memory heap when recent login history is enabled and copying virtual attributes that reference ds-privilege-name values.