Read the docs

Okta

Records40All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high16CVSS 7.0–8.9

Exploited now

Okta records in CISA KEV

No Okta vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Access Gateway 12 records MEDIUM Hyperdrive 4 records LOW Advanced Server Access 2 records MEDIUM Java Management Sdk 2 records LOW Verify 2 records LOW Active Directory Agent 1 record LOW Advanced Server Access Client For Windows 1 record MEDIUM Imprivata Privileged Access Management 1 record MEDIUM

Records

2 records in Verify · all components

TI-2024-08528 CVE-2024-9191 · GHSA-vfhr-8j89-9v9w

Incorrect default permissions in Okta Verify for Windows

Priority LOW 36

The Okta Device Access features, provided by the Okta Verify agent for Windows, provides access to the OktaDeviceAccessPipe, which enables attackers in a compromised device to retrieve passwords associated with Desktop M…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00239 Published 2024-11-01 Fixed in 5.3.3 CWE-276
TI-2024-06543 CVE-2024-7061 · GHSA-jh6g-rh4q-hcw2

Path traversal in Okta Verify for Windows

Priority LOW 33

Okta Verify for Windows is vulnerable to privilege escalation through DLL hijacking.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00214 Published 2024-08-07 Fixed in 5.0.1, 5.0.2 CWE-22
Open these records in search →