Okta

Records40All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high16CVSS 7.0–8.9

Exploited now

Okta records in CISA KEV

No Okta vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Access Gateway 12 records MEDIUM Hyperdrive 4 records LOW Advanced Server Access 2 records MEDIUM Java Management Sdk 2 records LOW Verify 2 records LOW Active Directory Agent 1 record LOW Advanced Server Access Client For Windows 1 record MEDIUM Imprivata Privileged Access Management 1 record MEDIUM

Records

4 records in Hyperdrive · all components

TI-2026-54627 CVE-2026-78574 · GHSA-7xfw-pj33-px3g

Improper Assembly Resolution in Okta Hyperdrive Integration Plugin Registry Handling

LOW 34

The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification.

CVSS 3.1HIGH 7.5 Local Low privileges No interaction EPSS 0.00129 Published 2026-09-08 Fixed in 1.5.2 CWE-426

TI-2026-54674 CVE-2026-78627 · GHSA-mm4c-wvrq-74qm

Improper Credential Protection in Okta Hyperdrive Integration Installer Logging

LOW 31

The Okta Hyperdrive Integration installer does not mask the OAuth client secret when passed as an MSI property.

CVSS 3.1HIGH 7.3 Local Low privileges No interaction EPSS 0.0014 Published 2026-09-08 Fixed in 1.5.2 CWE-532

TI-2026-54677 CVE-2026-78631 · GHSA-7x42-7j3m-qc6m

Improper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging

LOW 24

The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level on every successful MFA completion.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00137 Published 2026-09-08 Fixed in 1.5.2 CWE-532

TI-2026-54675 CVE-2026-78629 · GHSA-p4wq-g97j-pcf5

Improper Authentication Verification in the Okta Hyperdrive Agent MFA Response Handling

LOW 24

The Okta Hyperdrive agent plugin returns a success response without a signed SAML assertion when the organization's policy requires no MFA for a given user.

CVSS 3.1MEDIUM 5.6 Local Low privileges No interaction EPSS 0.0014 Published 2026-09-08 Fixed in 1.5.2 CWE-303

Open these records in search →

Critical	2
High	16
Medium	21
Low	1
No CVSS	0