Vendor

    Okta

    40 known vulnerabilities in products by Okta, 0 of them actively exploited (CISA KEV).

    Key figures

    40

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Okta
    HighCVE-2022-24295

    Okta Advanced Server Access Client: Command Injection

    		8.8
    MediumCVE-2021-28113

    Okta Access Gateway: Command Injection

    		6.7
    CriticalCVE-2026-115547

    Command Execution via Admin Console Input in Okta Access Gateway

    		9.1
    HighCVE-2022-1030

    Okta Advanced Server Access Client: Command Injection

    		8.8
    HighCVE-2026-115546

    Authentication Source Verification Issue in Okta Access Gateway

    		8.1
    HighCVE-2023-0093

    Okta Advanced Server Access: Command Injection

    		8.8
    CriticalCVE-2026-78623

    Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode Datastores

    		7.7
    HighCVE-2026-78626

    Improper Input Sanitization in Okta Access Gateway Protected Rules

    		8.1
    HighCVE-2026-78545

    Improper Input Sanitization in Okta Access Gateway Application Label Configuration

    		6.6
    HighCVE-2026-78550

    Improper Input Handling in Okta Access Gateway Management Console Exception Handler

    		6.6
    HighCVE-2024-10327

    Okta Verify for iOS: Improper Authentication

    		8.1
    MediumCVE-2026-78579

    Improper Input Sanitization in Okta Access Gateway LDAP Datastore Filter Interpolation

    		6.8
    MediumCVE-2026-78552

    Validation Bypass in Okta Access Gateway Custom Directives

    		6.0
    MediumCVE-2026-78633

    Denial of Service in Okta RADIUS Agent Packet Parser

    		6.5
    HighCVE-2026-78574

    Improper Assembly Resolution in Okta Hyperdrive Integration Plugin Registry Handling

    		7.5
    MediumCVE-2026-78624

    Improper Path Validation in Okta Access Gateway Backup and Restore Functionality

    		4.9
    HighCVE-2026-78627

    Improper Credential Protection in Okta Hyperdrive Integration Installer Logging

    		7.3
    MediumCVE-2026-78620

    Improper Path Validation in Okta Access Gateway Kerberos Configuration Handling

    		5.9
    MediumCVE-2026-78630

    Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing

    		6.7
    MediumCVE-2026-78625

    Okta Access Gateway: Code Injection

    		6.7
    MediumCVE-2026-78628

    Improper Input Validation in the Okta Credential Provider for Windows

    		6.0
    MediumCVE-2026-78632

    Insecure Default File Permissions in Okta RADIUS Agent Windows Installer

    		5.3
    MediumCVE-2026-78622

    Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal

    		6.0
    HighCVE-2025-67505

    Race condition in the Okta Java SDK

    		8.4
    MediumCVE-2026-78629

    Improper Authentication Verification in the Okta Hyperdrive Agent MFA Response Handling

    		5.6

    All vulnerabilities in search

    Products

    Products by Okta
    Okta Access Gateway130
    Okta Access Gateway120
    Okta Hyperdrive Agent40
    Okta Verify For Windows40
    Okta Advanced Server Access30