One Identity vulnerabilities

Products

• Password Manager 6
• Onelogin Active Directory Connector (adc) 3
• Onelogin 2

Newest

• devolutions password manager Improper certificate validation in the Devolutions Server connection handling in Devolutions... CVE-2026-8497 7.4 HighJuly 29, 2026
• one identity password manager, password manager manager +1 more Open redirection vulnerability in Password Manager CVE-2026-10839 5.1 MediumJune 17, 2026
• one identity password manager, password manager manager +1 more Open redirection vulnerability in Password Manager CVE-2026-10837 5.1 MediumJune 17, 2026
• one identity password manager, password manager manager +1 more Improper neutralization of HTTP headers in Password Manager CVE-2026-10836 5.1 MediumJune 17, 2026
• one identity onelogin In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps... CVE-2025-59363 7.7 HighSeptember 14, 2025
• one identity onelogin In One Identity OneLogin before 2025.2.0, the SQL connection "application name" is set based on... CVE-2025-52924 4.0 MediumJuly 19, 2025
• one identity password manager The Secure Password extension in One Identity Password Manager before 5.14.4 allows local... CVE-2025-27582 7.6 HighJuly 14, 2025
• one identity onelogin active directory connector (adc) OneLogin AD Connector Log S3 Bucket Hijack Leading to Cross-Tenant Data Leakage CVE-2025-34064 9.0 CriticalJuly 1, 2025
• one identity onelogin active directory connector (adc) OneLogin AD Connector JWT Authentication Bypass via Exposed Signing Key CVE-2025-34063 10.0 CriticalJuly 1, 2025
• one identity onelogin active directory connector (adc) OneLogin AD Connector API Credential and Signing Key Exposure CVE-2025-34062 5.7 MediumJuly 1, 2025
• enpass password manager Enpass Password Manager sensitive information in memory CVE-2024-9203 2.0 LowSeptember 26, 2024