CVE-2026-20746

PENDING

N/A

CVSS Severity Score

EPSS Score0.0540%

EPSS Percentile28.17th

Published2026年6月12日

Last Modified2026年6月12日

Vulnerability Description

Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust java memory heap when recent login history is enabled and copying virtual attributes that reference ds-privilege-name values.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://docs.pingidentity.com/pingdirectory/11.0/release_notes/pd_release_notes.html#pingdirectory-suite-of-products-11-0-0-1-march-2026

🔗 https://support.pingidentity.com/s/article/SECADV052-Denial-of-Service-via-copying-virtual-attributes

🔗 https://www.pingidentity.com/en/resources/downloads/pingdirectory-downloads.html

Vulnerability Description

Affected Platforms (CPE)

References & Advisories

相關漏洞威脅