CVE-2025-32736

The Administrative Console of PingFederate versions prior to 13.1 is susceptible to Cross-Site Request Forgery (CSRF) vulnerabilities, enabling attackers to execute unauthorized actions by exploiting active sessions of administrators through specially-crafted links. Organizations using affected versions should prioritize remediation to mitigate potential unauthorized access and actions within their administrative interfaces. This is particularly critical for those managing sensitive identity and access management functions.