Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Okta — Vulnerabilities & Security Advisories 36

Browse all 36 CVE security advisories affecting Okta. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Okta provides identity and access management solutions as a core business, enabling secure authentication and authorization for enterprises. Historically, the platform has been susceptible to various vulnerability classes including cross-site scripting (XSS), remote code execution (RCE), and privilege escalation flaws. While the company maintains a security-first approach, it has faced notable incidents, including a 2022 breach where attackers compromised a customer support engineer's account, leading to unauthorized access to some customer data. Despite these challenges, Okta remains a widely adopted solution in the identity management space, with ongoing efforts to address security concerns and maintain its position as a critical component of organizational security infrastructure.

Found 11 results / 36 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-78630 Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing — Okta Access Gateway CWE-78 6.7 Medium 2026-09-08
CVE-2026-78620 Improper Path Validation in Okta Access Gateway Kerberos Configuration Handling — Okta Access Gateway CWE-73 5.9 Medium 2026-09-08
CVE-2026-78579 Improper Input Sanitization in Okta Access Gateway LDAP Datastore Filter Interpolation — Okta Access Gateway CWE-90 6.8 Medium 2026-09-08
CVE-2026-78626 Improper Input Sanitization in Okta Access Gateway Protected Rules — Okta Access Gateway CWE-863 8.1 High 2026-09-08
CVE-2026-78625 Insufficient Validation of Dashboard Application Labels in Okta Access Gateway Dashboard Site Configuration — Okta Access Gateway CWE-94 6.7 Medium 2026-09-08
CVE-2026-78624 Improper Path Validation in Okta Access Gateway Backup and Restore Functionality — Okta Access Gateway CWE-22 4.9 Medium 2026-09-08
CVE-2026-78560 Improper Authentication Validation in Okta Access Gateway Pass-Through Authentication Source — Okta Access Gateway CWE-287 4.8 Medium 2026-09-08
CVE-2026-78552 Validation Bypass in Okta Access Gateway Custom Directives — Okta Access Gateway CWE-693 6.0 Medium 2026-09-08
CVE-2026-78623 Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode Datastores — Okta Access Gateway CWE-89 7.7 High 2026-09-08
CVE-2026-78550 Improper Input Handling in Okta Access Gateway Management Console Exception Handler — Okta Access Gateway CWE-95 6.6 Medium 2026-09-08
CVE-2026-78545 Improper Input Sanitization in Okta Access Gateway Application Label Configuration — Okta Access Gateway CWE-94 6.6 Medium 2026-09-08

This page lists every published CVE security advisory associated with Okta. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.