Read the docs

Okta

Records40All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high16CVSS 7.0–8.9

Exploited now

Okta records in CISA KEV

No Okta vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Access Gateway 12 records MEDIUM Hyperdrive 4 records LOW Advanced Server Access 2 records MEDIUM Java Management Sdk 2 records LOW Verify 2 records LOW Active Directory Agent 1 record LOW Advanced Server Access Client For Windows 1 record MEDIUM Imprivata Privileged Access Management 1 record MEDIUM

Records

2 records in Advanced Server Access · all components

TI-2023-00089 CVE-2023-0093 · GHSA-vm8m-8vm4-x33v

Command injection in Okta Advanced Server Access

Priority MEDIUM 42

Okta Advanced Server Access Client versions 1.13.1 through 1.65.0 are vulnerable to command injection due to the third party library webbrowser.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01057 Published 2023-03-06 No fix listed CWE-77
TI-2022-00927 CVE-2022-1030 · GHSA-q87m-52r8-4jpp

OS command injection in Okta Advanced Server Access Client

Priority MEDIUM 41

Okta Advanced Server Access Client for Linux and macOS prior to version 1.58.0 was found to be vulnerable to command injection via a specially crafted URL.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01487 Published 2022-03-23 No fix listed CWE-78
Open these records in search →