Okta

Records40All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high16CVSS 7.0–8.9

Exploited now

Okta records in CISA KEV

No Okta vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Access Gateway 12 records MEDIUM Hyperdrive 4 records LOW Advanced Server Access 2 records MEDIUM Java Management Sdk 2 records LOW Verify 2 records LOW Active Directory Agent 1 record LOW Advanced Server Access Client For Windows 1 record MEDIUM Imprivata Privileged Access Management 1 record MEDIUM

Records

1 record in Advanced Server Access Client For Windows · all components

TI-2022-08176 CVE-2022-24295 · GHSA-gff3-6394-p6p3

Code injection in Okta Advanced Server Access Client

MEDIUM 55

Okta Advanced Server Access Client for Windows prior to version 1.57.0 was found to be vulnerable to command injection via a specially crafted URL.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.16571 Published 2022-02-21 No fix listed CWE-94

Open these records in search →