VULNERABILITY INTELLIGENCE

CVE-2025-22854

EPSS probability0.34%
CISA KEVNot currently listed
Published2025-06-15
Last modified2026-06-17

Description

Improper handling of non-200 http responses in the PingFederate Google Adapter leads to thread exhaustion under normal usage conditions.

Weakness classification

  • responsible-disclosure@pingidentity.com: CWE-394

Primary references