VULNERABILITY INTELLIGENCE

CVE-2025-21085

EPSS probability0.34%
CISA KEVNot currently listed
Published2025-06-15
Last modified2026-06-17

Description

PingFederate OAuth2 grant duplication in PostgreSQL persistent storage allows OAuth2 requests to use excessive memory utilization.

Weakness classification

  • responsible-disclosure@pingidentity.com: CWE-462

Primary references