Okta

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-45094 1Okta 1Imprivata Privileged Access Management Jun 17, 2026 Jul 20, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Imprivata Privileged Access Management (formally Xton Privileged Access Management) 2.3.202112051108 allows XSS.
CVE-2023-0093 1Okta 1Advanced Server Access Jun 17, 2026 Mar 6, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Okta Advanced Server Access Client versions 1.13.1 through 1.65.0 are vulnerable to command injection due to the third party library webbrowser. An outdated library, webbrowser, used by the ASA client was found to be vul...Show more Okta Advanced Server Access Client versions 1.13.1 through 1.65.0 are vulnerable to command injection due to the third party library webbrowser. An outdated library, webbrowser, used by the ASA client was found to be vulnerable to command injection. To exploit this issue, an attacker would need to phish the user to enter an attacker controlled server URL during enrollment.Show less
CVE-2022-3145 1Okta 1Oidc Middleware Jun 17, 2026 Jan 12, 2023 N/A· v4 4.7 MEDIUM· v3 N/A· v2 An open redirect vulnerability exists in Okta OIDC Middleware prior to version 5.0.0 allowing an attacker to redirect a user to an arbitrary URL.
CVE-2022-1697 1Okta 1Active Directory Agent Jun 17, 2026 Sep 6, 2022 N/A· v4 3.9 LOW· v3 N/A· v2 Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted path. Note: To remediate this vulnerability, you must uninstall Okta Active Directory Agent and reins...Show more Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted path. Note: To remediate this vulnerability, you must uninstall Okta Active Directory Agent and reinstall Okta Active Directory Agent 3.12.0 or greater per the documentation.Show less
CVE-2022-1030 1Okta 1Advanced Server Access Jun 17, 2026 Mar 23, 2022 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 Okta Advanced Server Access Client for Linux and macOS prior to version 1.58.0 was found to be vulnerable to command injection via a specially crafted URL. An attacker, who has knowledge of a valid team name for the vict...Show more Okta Advanced Server Access Client for Linux and macOS prior to version 1.58.0 was found to be vulnerable to command injection via a specially crafted URL. An attacker, who has knowledge of a valid team name for the victim and also knows a valid target host where the user has access, can execute commands on the local system.Show less
CVE-2022-24295 1Okta 1Advanced Server Access Client For Windows Jun 17, 2026 Feb 21, 2022 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Okta Advanced Server Access Client for Windows prior to version 1.57.0 was found to be vulnerable to command injection via a specially crafted URL.
CVE-2021-28113 1Okta 1Access Gateway Jun 17, 2026 Apr 2, 2021 N/A· v4 6.7 MEDIUM· v3 8.7 HIGH· v2 A command injection vulnerability in the cookieDomain and relayDomain parameters of Okta Access Gateway before 2020.9.3 allows attackers (with admin access to the Okta Access Gateway UI) to execute OS commands as a privi...Show more A command injection vulnerability in the cookieDomain and relayDomain parameters of Okta Access Gateway before 2020.9.3 allows attackers (with admin access to the Okta Access Gateway UI) to execute OS commands as a privileged system account.Show less

Previous 12