Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Okta — Vulnerabilities & Security Advisories 36

Browse all 36 CVE security advisories affecting Okta. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Okta provides identity and access management solutions as a core business, enabling secure authentication and authorization for enterprises. Historically, the platform has been susceptible to various vulnerability classes including cross-site scripting (XSS), remote code execution (RCE), and privilege escalation flaws. While the company maintains a security-first approach, it has faced notable incidents, including a 2022 breach where attackers compromised a customer support engineer's account, leading to unauthorized access to some customer data. Despite these challenges, Okta remains a widely adopted solution in the identity management space, with ongoing efforts to address security concerns and maintain its position as a critical component of organizational security infrastructure.

CVE ID Title CVSS Severity Published
CVE-2026-78633 Denial of Service in Okta RADIUS Agent Packet Parser — Okta RADIUS Agent CWE-835 6.5 Medium 2026-10-13
CVE-2026-78632 Insecure Default File Permissions in Okta RADIUS Agent Windows Installer — Okta RADIUS Agent CWE-732 5.3 Medium 2026-10-13
CVE-2026-78628 Improper Input Validation in the Okta Credential Provider for Windows — Okta Credential Provider for Windows CWE-20 6.0 Medium 2026-10-13
CVE-2026-78622 Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal — Okta Verify for Windows CWE-59 6.0 Medium 2026-09-08
CVE-2026-78631 Improper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging — Okta Hyperdrive Agent CWE-532 5.3 Medium 2026-09-08
CVE-2026-78630 Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing — Okta Access Gateway CWE-78 6.7 Medium 2026-09-08
CVE-2026-78629 Improper Authentication Verification in the Okta Hyperdrive Agent MFA Response Handling — Okta Hyperdrive Agent CWE-303 5.6 Medium 2026-09-08
CVE-2026-78635 Improper Input Validation in the Okta Privileged Access SSH Client URL Handler Argument — Okta Privileged Access Client CWE-88 5.0 Medium 2026-09-08
CVE-2026-78620 Improper Path Validation in Okta Access Gateway Kerberos Configuration Handling — Okta Access Gateway CWE-73 5.9 Medium 2026-09-08
CVE-2026-78579 Improper Input Sanitization in Okta Access Gateway LDAP Datastore Filter Interpolation — Okta Access Gateway CWE-90 6.8 Medium 2026-09-08
CVE-2026-78627 Improper Credential Protection in Okta Hyperdrive Integration Installer Logging — Okta Hyperdrive Integration Plugin CWE-532 7.3 High 2026-09-08
CVE-2026-78574 Improper Assembly Resolution in Okta Hyperdrive Integration Plugin Registry Handling — Okta Hyperdrive Integration Plugin CWE-426 7.5 High 2026-09-08
CVE-2026-78626 Improper Input Sanitization in Okta Access Gateway Protected Rules — Okta Access Gateway CWE-863 8.1 High 2026-09-08
CVE-2026-78625 Insufficient Validation of Dashboard Application Labels in Okta Access Gateway Dashboard Site Configuration — Okta Access Gateway CWE-94 6.7 Medium 2026-09-08
CVE-2026-78624 Improper Path Validation in Okta Access Gateway Backup and Restore Functionality — Okta Access Gateway CWE-22 4.9 Medium 2026-09-08
CVE-2026-78560 Improper Authentication Validation in Okta Access Gateway Pass-Through Authentication Source — Okta Access Gateway CWE-287 4.8 Medium 2026-09-08
CVE-2026-78552 Validation Bypass in Okta Access Gateway Custom Directives — Okta Access Gateway CWE-693 6.0 Medium 2026-09-08
CVE-2026-78623 Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode Datastores — Okta Access Gateway CWE-89 7.7 High 2026-09-08
CVE-2026-78550 Improper Input Handling in Okta Access Gateway Management Console Exception Handler — Okta Access Gateway CWE-95 6.6 Medium 2026-09-08
CVE-2026-78545 Improper Input Sanitization in Okta Access Gateway Application Label Configuration — Okta Access Gateway CWE-94 6.6 Medium 2026-09-08
CVE-2026-77585 Improper Validation of SSH Target in Okta Privileged Access Client — Okta Privileged Access Client CWE-78 5.3 Medium 2026-08-25
CVE-2025-67505 Race condition in the Okta Java SDK — okta-sdk-java CWE-362 8.4 High 2025-12-10
CVE-2025-66033 Improper Memory Cleanup in the Okta Java SDK — okta-sdk-java CWE-401 5.3 Medium 2025-12-10
CVE-2025-7371 Okta On-Premises Provisioning Agent 日志信息泄露漏洞 — Okta On-Premises Provisioning Agent CWE-532 6.8 Medium 2025-07-22
CVE-2024-9875 Okta Privileged Access 输入验证错误漏洞 — Okta Privileged Access Server Agent (SFTD) CWE-20 7.1 High 2024-11-20
CVE-2024-9191 Okta Verify 安全漏洞 — Okta Verify for Windows CWE-276 7.1 High 2024-11-01
CVE-2024-10327 Okta Verify 安全漏洞 — Okta Verify for iOS CWE-287 8.1 High 2024-10-24
CVE-2024-7061 Okta Verify 安全漏洞 — Okta Verify for Windows CWE-22 5.5 Medium 2024-08-07
CVE-2024-0981 Okta Browser Plugin 安全漏洞 — Okta Browser Plugin CWE-79 7.1 High 2024-07-23
CVE-2024-0980 Okta Verify 安全漏洞 — Okta Verify for Windows CWE-22 8.8AI High AI 2024-03-27

This page lists every published CVE security advisory associated with Okta. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.