CVE-2025-22854CWE-394

Possible thread exhaustion from processing http responses in PingFederate Google Adapter

Medium · published June 15, 2025

CVSS v4.0
6.9
EPSS
0%
Percentile
25.8
In the wild
Unconfirmed
What it is

Improper handling of non-200 http responses in the PingFederate Google Adapter leads to thread exhaustion under normal usage conditions.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/S:P/AU:Y/R:A/RE:M/U:Red
EPSS
0.00337 · 25.8th percentile
Weakness
CWE-394 · Unexpected Status Code or Return Value
Published
2025-06-15T15:00Z
EPSS history
Timeline
  • 15 JUN 15:00Z
    Possible thread exhaustion from processing http responses in PingFederate Google Adapter
    cvelistv5