CVE-2025-20059

Summary

CVE-2025-20059 is a Relative Path Traversal vulnerability affecting the Ping Identity PingAM Java Policy Agent. This issue allows Parameter Injection, enabling an attacker to potentially access sensitive files or data. The vulnerability impacts versions of PingAM Java Policy Agent up to and including 5.10.3, 2023.11.1, and 2024.9. Successful exploitation could result in unauthorized access or system compromise. Users are strongly urged to apply the available patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.