Okta 厂商相关 36 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
Okta是企业级身份认证与访问管理服务提供商，帮助组织实现单点登录和多因素认证。历史漏洞主要包括身份验证绕过、跨站脚本攻击和权限提升问题。2022年曾曝出严重身份验证漏洞，攻击者可利用该问题获取未授权访问权限。截至最新统计，该平台已记录15条CVE漏洞，主要集中在身份验证和会话管理环节。其安全特性包括多因素认证和自适应访问控制，但频繁的安全事件提醒用户需及时更新补丁并加强监控。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-78633 | Okta RADIUS Agent 拒绝服务漏洞 — Okta RADIUS Agent CWE-835 | 6.5 | Medium | 2026-10-13 |
| CVE-2026-78632 | Okta RADIUS Agent Windows安装程序不安全的默认文件权限漏洞 — Okta RADIUS Agent CWE-732 | 5.3 | Medium | 2026-10-13 |
| CVE-2026-78628 | Okta Windows凭证提供者输入验证不当漏洞 — Okta Credential Provider for Windows CWE-20 | 6.0 | Medium | 2026-10-13 |
| CVE-2026-78622 | Okta Verify for Windows 后置链接漏洞 — Okta Verify for Windows CWE-59 | 6.0 | Medium | 2026-09-08 |
| CVE-2026-78631 | Okta Hyperdrive Agent 日志信息泄露漏洞 — Okta Hyperdrive Agent CWE-532 | 5.3 | Medium | 2026-09-08 |
| CVE-2026-78630 | Okta Access Gateway 命令注入漏洞 — Okta Access Gateway CWE-78 | 6.7 | Medium | 2026-09-08 |
| CVE-2026-78629 | Okta Hyperdrive Agent 授权问题漏洞 — Okta Hyperdrive Agent CWE-303 | 5.6 | Medium | 2026-09-08 |
| CVE-2026-78635 | Okta Privileged Access Client 命令注入漏洞 — Okta Privileged Access Client CWE-88 | 5.0 | Medium | 2026-09-08 |
| CVE-2026-78620 | Okta Access Gateway 输入验证错误漏洞 — Okta Access Gateway CWE-73 | 5.9 | Medium | 2026-09-08 |
| CVE-2026-78579 | Okta Access Gateway 输入验证错误漏洞 — Okta Access Gateway CWE-90 | 6.8 | Medium | 2026-09-08 |
| CVE-2026-78627 | Okta Hyperdrive Integration Plugin 日志信息泄露漏洞 — Okta Hyperdrive Integration Plugin CWE-532 | 7.3 | High | 2026-09-08 |
| CVE-2026-78574 | Okta Hyperdrive Integration Plugin 权限许可和访问控制问题漏洞 — Okta Hyperdrive Integration Plugin CWE-426 | 7.5 | High | 2026-09-08 |
| CVE-2026-78626 | Okta Access Gateway 授权问题漏洞 — Okta Access Gateway CWE-863 | 8.1 | High | 2026-09-08 |
| CVE-2026-78625 | Okta Access Gateway 代码注入漏洞 — Okta Access Gateway CWE-94 | 6.7 | Medium | 2026-09-08 |
| CVE-2026-78624 | Okta Access Gateway 路径遍历漏洞 — Okta Access Gateway CWE-22 | 4.9 | Medium | 2026-09-08 |
| CVE-2026-78560 | Okta Access Gateway 授权问题漏洞 — Okta Access Gateway CWE-287 | 4.8 | Medium | 2026-09-08 |
| CVE-2026-78552 | Okta Access Gateway 处理逻辑错误漏洞 — Okta Access Gateway CWE-693 | 6.0 | Medium | 2026-09-08 |
| CVE-2026-78623 | Okta Access Gateway SQL注入漏洞 — Okta Access Gateway CWE-89 | 7.7 | High | 2026-09-08 |
| CVE-2026-78550 | Okta Access Gateway 代码注入漏洞 — Okta Access Gateway CWE-95 | 6.6 | Medium | 2026-09-08 |
| CVE-2026-78545 | Okta Access Gateway 代码注入漏洞 — Okta Access Gateway CWE-94 | 6.6 | Medium | 2026-09-08 |
| CVE-2026-77585 | Okta Privileged Access Client 命令注入漏洞 — Okta Privileged Access Client CWE-78 | 5.3 | Medium | 2026-08-25 |
| CVE-2025-67505 | Okta Java Management SDK 竞争条件问题漏洞 — okta-sdk-java CWE-362 | 8.4 | High | 2025-12-10 |
| CVE-2025-66033 | Okta Java Management SDK 安全漏洞 — okta-sdk-java CWE-401 | 5.3 | Medium | 2025-12-10 |
| CVE-2025-7371 | Okta On-Premises Provisioning Agent 日志信息泄露漏洞 — Okta On-Premises Provisioning Agent CWE-532 | 6.8 | Medium | 2025-07-22 |
| CVE-2024-9875 | Okta Privileged Access 输入验证错误漏洞 — Okta Privileged Access Server Agent (SFTD) CWE-20 | 7.1 | High | 2024-11-20 |
| CVE-2024-9191 | Okta Verify 安全漏洞 — Okta Verify for Windows CWE-276 | 7.1 | High | 2024-11-01 |
| CVE-2024-10327 | Okta Verify 安全漏洞 — Okta Verify for iOS CWE-287 | 8.1 | High | 2024-10-24 |
| CVE-2024-7061 | Okta Verify 安全漏洞 — Okta Verify for Windows CWE-22 | 5.5 | Medium | 2024-08-07 |
| CVE-2024-0981 | Okta Browser Plugin 安全漏洞 — Okta Browser Plugin CWE-79 | 7.1 | High | 2024-07-23 |
| CVE-2024-0980 | Okta Verify 安全漏洞 — Okta Verify for Windows CWE-22 | 8.8AI | High AI | 2024-03-27 |
本页汇总了 Okta 厂商截至目前公开的全部 36 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。