XSS exists in Ping Identity Agentless Integration Kit before 1.5.

Source