Skip to content
Okta vulnerabilities
Newest
-
okta access gateway
Command Execution via Admin Console Input in Okta Access Gateway
CVE-2026-115547
9.1 Critical
-
okta access gateway
Authentication Source Verification Issue in Okta Access Gateway
CVE-2026-115546
8.1 High
-
okta radius agent
Denial of Service in Okta RADIUS Agent Packet Parser
CVE-2026-78633
6.5 Medium
-
okta radius agent
Insecure Default File Permissions in Okta RADIUS Agent Windows Installer
CVE-2026-78632
5.3 Medium
-
okta credential provider for windows
Improper Input Validation in the Okta Credential Provider for Windows
CVE-2026-78628
6.0 Medium
-
okta verify for windows
Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal
CVE-2026-78622
6.0 Medium
-
okta hyperdrive, hyperdrive agent +1 more
Improper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging
CVE-2026-78631
5.3 Medium
-
okta access gateway
Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing
CVE-2026-78630
6.7 Medium
-
okta hyperdrive, hyperdrive agent +1 more
Improper Authentication Verification in the Okta Hyperdrive Agent MFA Response Handling
CVE-2026-78629
5.6 Medium
-
okta privileged access client
Improper Input Validation in the Okta Privileged Access SSH Client URL Handler Argument
CVE-2026-78635
5.0 Medium
-
okta access gateway
Improper Path Validation in Okta Access Gateway Kerberos Configuration Handling
CVE-2026-78620
5.9 Medium
-
okta access gateway
Improper Input Sanitization in Okta Access Gateway LDAP Datastore Filter Interpolation
CVE-2026-78579
6.8 Medium
-
okta hyperdrive, hyperdrive integration plugin +1 more
Improper Credential Protection in Okta Hyperdrive Integration Installer Logging
CVE-2026-78627
7.3 High
-
okta hyperdrive, hyperdrive integration plugin +1 more
Improper Assembly Resolution in Okta Hyperdrive Integration Plugin Registry Handling
CVE-2026-78574
7.5 High
-
okta access gateway
Improper Input Sanitization in Okta Access Gateway Protected Rules
CVE-2026-78626
8.1 High
-
okta access gateway
Insufficient Validation of Dashboard Application Labels in Okta Access Gateway Dashboard Site Configuration
CVE-2026-78625
6.7 Medium
-
okta access gateway
Improper Path Validation in Okta Access Gateway Backup and Restore Functionality
CVE-2026-78624
4.9 Medium
-
okta access gateway
Improper Authentication Validation in Okta Access Gateway Pass-Through Authentication Source
CVE-2026-78560
4.8 Medium
-
okta access gateway
Validation Bypass in Okta Access Gateway Custom Directives
CVE-2026-78552
6.0 Medium
-
okta access gateway
Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode Datastores
CVE-2026-78623
7.7 High
-
okta access gateway
Improper Input Handling in Okta Access Gateway Management Console Exception Handler
CVE-2026-78550
6.6 Medium
-
okta access gateway
Improper Input Sanitization in Okta Access Gateway Application Label Configuration
CVE-2026-78545
6.6 Medium
-
okta privileged access client
Improper Validation of SSH Target in Okta Privileged Access Client
CVE-2026-77585
5.3 Medium
-
okta java management sdk, okta-sdk-java +1 more
Race condition in the Okta Java SDK
CVE-2025-67505
Fix available
8.4 High
-
okta java management sdk, okta-sdk-java +1 more
Improper Memory Cleanup in the Okta Java SDK
CVE-2025-66033
Fix available
5.3 Medium
-
okta on-premises provisioning agent
Okta On-Premises Provisioning (OPP) agents log certain user data during administrator-initiated...
CVE-2025-7371
6.8 Medium
-
okta privileged access server agent (sftd), privileged access server agent sftd +1 more
Okta Privileged Access server agent (SFTD) versions 1.82.0 to 1.84.0 are affected by a privilege escalation vulnerability when the sudo command bundles feature is enabled. To remediate this vulnerabil…
CVE-2024-9875
7.1 High
-
okta verify, verify for windows +1 more
The Okta Device Access features, provided by the Okta Verify agent for Windows, provides access...
CVE-2024-9191
7.1 High
-
okta verify for ios, verify +1 more
A vulnerability in Okta Verify for iOS versions 9.25.1 (beta) and 9.27.0 (including beta) allows...
CVE-2024-10327
8.1 High
-
okta verify for windows, verify +1 more
Okta Verify for Windows is vulnerable to privilege escalation through DLL hijacking. The...
CVE-2024-7061
5.5 Medium
-
okta browser plugin
Okta Browser Plugin versions 6.5.0 through 6.31.0 (Chrome/Edge/Firefox/Safari) are vulnerable to...
CVE-2024-0981
7.1 High
-
okta verify for windows, verify +1 more
The Auto-update service for Okta Verify for Windows is vulnerable to two flaws which in...
CVE-2024-0980
7.1 High
-
okta ldap agent
The LDAP Agent Update service with versions prior to 5.18 used an unquoted path, which could...
CVE-2023-0392
6.7 Medium
-
okta imprivata privileged access management
Imprivata Privileged Access Management (formally Xton Privileged Access Management) 2.3...
CVE-2021-45094
5.4 Medium
-
okta advanced server access
Okta Advanced Server Access Client versions 1.13.1 through 1.65.0 are vulnerable to command...
CVE-2023-0093
8.8 High
-
okta oidc middleware
@okta/oidc-middlewareOpen Redirect vulnerability
CVE-2022-3145
Fix available
4.7 Medium
-
okta active directory agent
Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update...
CVE-2022-1697
3.9 Low
-
okta advanced server access client, advanced server access +1 more
Okta Advanced Server Access Client for Linux and macOS prior to version 1.58.0 was found to be...
CVE-2022-1030
8.8 High
-
okta advanced server access client for windows, advanced server access client +1 more
Okta Advanced Server Access Client for Windows prior to version 1.57.0 was found to be vulnerable...
CVE-2022-24295
EPSS 16.6%
8.8 High
-
okta access gateway
A command injection vulnerability in the cookieDomain and relayDomain parameters of Okta Access...
CVE-2021-28113
EPSS 22.8%
6.7 Medium