- How many CVEs does okta have?
- okta has 38 published CVE records since 2021, including 24 in the last two years.
- How many okta CVEs are in CISA KEV?
- None of okta's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Which okta products have the most CVEs?
- The okta products with the most published CVEs are access gateway, Okta Access Gateway, hyperdrive, Okta Verify for Windows, verify.
- What are the most common weakness types in okta CVEs?
- okta's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-532 (Insertion of Sensitive Information into Log File), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
- Are there public exploits for okta vulnerabilities?
- Yes — 2 of okta's CVEs have a known public exploit.
- How many critical okta vulnerabilities are there?
- okta has 1 critical and 15 high-severity CVEs.
- What is the average severity of okta CVEs?
- The average CVSS base score across okta's scored CVEs is 6.7.