Browse all 36 CVE security advisories affecting Okta. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Okta provides identity and access management solutions as a core business, enabling secure authentication and authorization for enterprises. Historically, the platform has been susceptible to various vulnerability classes including cross-site scripting (XSS), remote code execution (RCE), and privilege escalation flaws. While the company maintains a security-first approach, it has faced notable incidents, including a 2022 breach where attackers compromised a customer support engineer's account, leading to unauthorized access to some customer data. Despite these challenges, Okta remains a widely adopted solution in the identity management space, with ongoing efforts to address security concerns and maintain its position as a critical component of organizational security infrastructure.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2023-0392 | Okta LDAP Agent 安全漏洞 — LDAP Agent CWE-428 | 8.8AI | High AI | 2023-11-08 |
| CVE-2023-0093 | Okta Advanced Server Access Client 命令注入漏洞 — Advanced Server Access | 6.8 | - | 2023-03-06 |
| CVE-2022-3145 | Okta NodeJS OIDC Middleware 输入验证错误漏洞 — Okta OIDC Middleware | 6.1 | - | 2023-01-12 |
| CVE-2022-1697 | Okta Active Directory Agent 代码问题漏洞 — Okta Active Directory Agent | 3.9 | - | 2022-09-06 |
| CVE-2022-1030 | Okta Advanced Server Access Client 操作系统命令注入漏洞 — Advanced Server Access Client | 7.5 | - | 2022-03-23 |
| CVE-2022-24295 | Okta Advanced Server Access Client 代码注入漏洞 — Okta Advanced Server Access Client | 8.8 | - | 2022-02-21 |
This page lists every published CVE security advisory associated with Okta. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.