Pingidentity Pingdirectory
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Pingidentity Pingdirectory.
By the Year
In 2026 there have been 1 vulnerability in Pingidentity Pingdirectory with an average score of 6.3 out of ten. Pingdirectory did not have any published security vulnerabilities last year. That is, 1 more vulnerability have already been reported in 2026 as compared to last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 6.30 |
| 2025 | 0 | 0.00 |
| 2024 | 1 | 8.80 |
It may take a day or so for new Pingdirectory vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Pingidentity Pingdirectory Security Vulnerabilities
Memory Exhaustion via Virtual Attribute Copy in PingDirectory 9.311.0
CVE-2026-20746
6.3 - Medium
- June 12, 2026
Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust java memory heap when recent login history is enabled and copying virtual attributes that reference ds-privilege-name values.
Memory Leak
Delegate Admin Privilege Escalation via Virtual Attr Provider (OpenDJ)
CVE-2023-36496
8.8 - High
- February 01, 2024
Delegated Admin Privilege virtual attribute provider plugin, when enabled, allows an authenticated user to elevate their permissions in the Directory Server.
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Pingidentity Pingdirectory or by Pingidentity? Click the Watch button to subscribe.
