Product by Okta
Okta Access Gateway
12 known vulnerabilities in Okta Access Gateway (Okta), 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2021-28113 | Okta Access Gateway: Command Injection | 6.7 | |
| Critical | CVE-2026-78623 | Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode Datastores | 7.7 | |
| High | CVE-2026-78626 | Improper Input Sanitization in Okta Access Gateway Protected Rules | 8.1 | |
| High | CVE-2026-78545 | Improper Input Sanitization in Okta Access Gateway Application Label Configuration | 6.6 | |
| High | CVE-2026-78550 | Improper Input Handling in Okta Access Gateway Management Console Exception Handler | 6.6 | |
| Medium | CVE-2026-78579 | Improper Input Sanitization in Okta Access Gateway LDAP Datastore Filter Interpolation | 6.8 | |
| Medium | CVE-2026-78552 | Validation Bypass in Okta Access Gateway Custom Directives | 6.0 | |
| Medium | CVE-2026-78624 | Improper Path Validation in Okta Access Gateway Backup and Restore Functionality | 4.9 | |
| Medium | CVE-2026-78620 | Improper Path Validation in Okta Access Gateway Kerberos Configuration Handling | 5.9 | |
| Medium | CVE-2026-78630 | Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing | 6.7 | |
| Medium | CVE-2026-78625 | Okta Access Gateway: Code Injection | 6.7 | |
| Medium | CVE-2026-78560 | Improper Authentication Validation in Okta Access Gateway Pass-Through Authentication Source | 4.8 |