VULNERABILITY INTELLIGENCE
CVE-2024-25573
EPSS probability0.37%
CISA KEVNot currently listed
Published2025-06-15
Last modified2026-06-17
Description
Unsanitized user-supplied data saved in the PingFederate Administrative Console could trigger the execution of JavaScript code in subsequent user processing.
Weakness classification
- responsible-disclosure@pingidentity.com: CWE-79