low1.8
CVE-2024-22477
A cross-site scripting vulnerability exists in the admin console OIDC Policy Management Editor.
Impact
A cross-site scripting vulnerability exists in the admin console OIDC Policy Management Editor. The impact is contained to admin console users only.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pingidentity | Pingfederate | from 10.3.0 through 10.3.13 from 11.0.0 through 11.0.9 from 11.1.0 through 11.1.9 from 11.2.0 through 11.2.8 from 11.3.0 through 11.3.4 Version 12.0.0 |