Login Request a demo
OK
Vendor
Okta
19 products with CVEs on record
53
CVEs
0
On KEV
5
New 30D
Products
OA
Okta Access Gateway
Okta
9.9
13 CVEs0 on KEV2 new
OR
Okta RADIUS Agent
Okta
6.5
2 CVEs0 on KEV2 new
OC
Okta Credential Provider for Windows
Okta
6.0
1 CVEs0 on KEV1 new
AG
Access Gateway
Okta
9.9
12 CVEs0 on KEV0 new
HY
Hyperdrive
Okta
6.3
4 CVEs0 on KEV0 new
AS
Advanced Server Access
Okta
8.8
2 CVEs0 on KEV0 new
JM
Java Management Sdk
Okta
8.4
2 CVEs0 on KEV0 new
OH
Okta Hyperdrive Agent
Okta
5.5
2 CVEs0 on KEV0 new
OH
Okta Hyperdrive Integration Plugin
Okta
6.3
2 CVEs0 on KEV0 new
OP
Okta Privileged Access Client
Okta
5.3
2 CVEs0 on KEV0 new
OK
okta-sdk-java
okta
8.4
2 CVEs0 on KEV0 new
VE
Verify
Okta
7.8
2 CVEs0 on KEV0 new
AD
Active Directory Agent
Okta
3.9
1 CVEs0 on KEV0 new
AS
Advanced Server Access Client For Windows
Okta
8.8
1 CVEs0 on KEV0 new
IP
Imprivata Privileged Access Management
Okta
5.4
1 CVEs0 on KEV0 new
LA
Ldap Agent
Okta
6.7
1 CVEs0 on KEV0 new
OM
Oidc Middleware
Okta
4.7
1 CVEs0 on KEV0 new
OO
Okta On-Premises Provisioning Agent
Okta
6.8
1 CVEs0 on KEV0 new
OV
Okta Verify for Windows
Okta
6.0
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-115547
New
OA
Okta Access Gateway
Okta
9.1
1%
Oct 23Command Execution via Admin Console Input in Okta Access Gateway
CVE-2026-115546
New
OA
Okta Access Gateway
Okta
8.1
0%
Oct 23Authentication Source Verification Issue in Okta Access Gateway
CVE-2026-78633
OR
Okta RADIUS Agent
Okta
6.5
0%
Oct 13Denial of Service in Okta RADIUS Agent Packet Parser
CVE-2026-78632
OR
Okta RADIUS Agent
Okta
5.3
0%
Oct 13Insecure Default File Permissions in Okta RADIUS Agent Windows Installer
CVE-2026-78628
OC
Okta Credential Provider for Windows
Okta
6.0
0%
Oct 13Improper Input Validation in the Okta Credential Provider for Windows
CVE-2026-78622
OV
Okta Verify for Windows
Okta
6.0
0%
Sep 8Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal
CVE-2026-78631
OH
Okta Hyperdrive Agent
Okta
5.5
0%
Sep 8Improper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging
CVE-2026-78630
OA
Okta Access Gateway
Okta
6.7
0%
Sep 8Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing
CVE-2026-78629
OH
Okta Hyperdrive Agent
Okta
5.5
0%
Sep 8Improper Authentication Verification in the Okta Hyperdrive Agent MFA Response Handling
CVE-2026-78635
OP
Okta Privileged Access Client
Okta
5.0
0%
Sep 8Improper Input Validation in the Okta Privileged Access SSH Client URL Handler Argument
CVE-2026-78620
OA
Okta Access Gateway
Okta
4.9
0%
Sep 8Improper Path Validation in Okta Access Gateway Kerberos Configuration Handling
CVE-2026-78579
OA
Okta Access Gateway
Okta
6.5
0%
Sep 8Improper Input Sanitization in Okta Access Gateway LDAP Datastore Filter Interpolation
CVE-2026-78627
OH
Okta Hyperdrive Integration Plugin
Okta
5.5
0%
Sep 8Improper Credential Protection in Okta Hyperdrive Integration Installer Logging
CVE-2026-78574
OH
Okta Hyperdrive Integration Plugin
Okta
6.3
0%
Sep 8Improper Assembly Resolution in Okta Hyperdrive Integration Plugin Registry Handling
CVE-2026-78626
OA
Okta Access Gateway
Okta
6.5
0%
Sep 8Improper Input Sanitization in Okta Access Gateway Protected Rules
CVE-2026-78625
OA
Okta Access Gateway
Okta
6.7
0%
Sep 8Insufficient Validation of Dashboard Application Labels in Okta Access Gateway Dashboard Site Configuration
CVE-2026-78624
OA
Okta Access Gateway
Okta
4.9
0%
Sep 8Improper Path Validation in Okta Access Gateway Backup and Restore Functionality
CVE-2026-78560
OA
Okta Access Gateway
Okta
6.5
0%
Sep 8Improper Authentication Validation in Okta Access Gateway Pass-Through Authentication Source
CVE-2026-78552
OA
Okta Access Gateway
Okta
4.9
0%
Sep 8Validation Bypass in Okta Access Gateway Custom Directives
CVE-2026-78623
OA
Okta Access Gateway
Okta
9.9
0%
Sep 8Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode Datastores
CVE-2026-78550
OA
Okta Access Gateway
Okta
7.2
0%
Sep 8Improper Input Handling in Okta Access Gateway Management Console Exception Handler
CVE-2026-78545
OA
Okta Access Gateway
Okta
7.2
0%
Sep 8Improper Input Sanitization in Okta Access Gateway Application Label Configuration
CVE-2026-77585
OP
Okta Privileged Access Client
Okta
5.3
0%
Aug 25Improper Validation of SSH Target in Okta Privileged Access Client
CVE-2025-67505
OK
okta-sdk-java
okta
8.4
0%
Dec 10Race condition in the Okta Java SDK
CVE-2025-66033
OK
okta-sdk-java
okta
5.3
0%
Dec 10Improper Memory Cleanup in the Okta Java SDK
CVE-2025-7371
OO
Okta On-Premises Provisioning Agent
Okta
6.8
0%
Jul 22Okta On-Premises Provisioning (OPP) agents log certain user data during administrator-initiated password resets
CVE-2024-9191
VE
Verify
Okta
7.8
0%
Nov 1The Okta Device Access features, provided by the Okta Verify agent for Windows, provides access to the OktaDeviceAccessPipe, which enables attackers in a compromised device to…
CVE-2024-7061
VE
Verify
Okta
7.8
0%
Aug 7Okta Verify for Windows is vulnerable to privilege escalation through DLL hijacking
CVE-2023-0392
LA
Ldap Agent
Okta
6.7
0%
Nov 8The LDAP Agent Update service with versions prior to 5.18 used an unquoted path, which could allow arbitrary code execution
CVE-2021-45094
IP
Imprivata Privileged Access Management
Okta
5.4
1%
Jul 20Imprivata Privileged Access Management (formally Xton Privileged Access Management) 2.3.202112051108 allows XSS
CVE-2023-0093
AS
Advanced Server Access
Okta
8.8
1%
Mar 6Okta Advanced Server Access Client versions 1.13.1 through 1.65.0 are vulnerable to command injection due to the third party library webbrowser
CVE-2022-3145
OM
Oidc Middleware
Okta
4.7
0%
Jan 12An open redirect vulnerability exists in Okta OIDC Middleware prior to version 5.0.0 allowing an attacker to redirect a user to an arbitrary URL
CVE-2022-1697
AD
Active Directory Agent
Okta
3.9
0%
Sep 6Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted path
CVE-2022-1030
AS
Advanced Server Access
Okta
8.8
1%
Mar 23Okta Advanced Server Access Client for Linux and macOS prior to version 1.58.0 was found to be vulnerable to command injection via a specially crafted URL
CVE-2022-24295
AS
Advanced Server Access Client For Windows
Okta
8.8
17%
Feb 21Okta Advanced Server Access Client for Windows prior to version 1.57.0 was found to be vulnerable to command injection via a specially crafted URL
CVE-2021-28113
AG
Access Gateway
Okta
6.7
23%
Apr 2A command injection vulnerability in the cookieDomain and relayDomain parameters of Okta Access Gateway before 2020.9.3 allows attackers (with admin access to the Okta Access…