CVE Database
/

CVE-2025-21085

Back to search

CVE-2025-21085

Published: Jun 15, 2025

Modified: Jun 16, 2025

PUBLISHED

Description

PingFederate OAuth2 grant duplication in PostgreSQL persistent storage allows OAuth2 requests to use excessive memory utilization.

VendorProductVersions

Ping Identity

PingFederate

affected
12.2.0 - < 12.2.4
affected
12.1.0 - < 12.1.9
affected
12.0 - < 12.0.9
affected
11.3.0 - < 11.3.13

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now