Advanced Server Access

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-0093 Mar 06, 21:15 HIGH This Week

Okta Advanced Server Access Client versions 1.13.1 through 1.65.0 are vulnerable to command injection due to the third party library webbrowser. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Okta Advanced Server Access

NVD

CVSS 3.1

8.8

EPSS

1.1%

CVE-2022-1030 Mar 23, 20:15 HIGH This Week

Okta Advanced Server Access Client for Linux and macOS prior to version 1.58.0 was found to be vulnerable to command injection via a specially crafted URL. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Apple Okta Advanced Server Access

NVD

CVSS 3.1

8.8

EPSS

1.5%

CVE-2023-0093

EPSS 1% CVSS 8.8

HIGH This Week

Command Injection Okta Advanced Server Access

NVD

CVE-2022-1030

EPSS 1% CVSS 8.8

HIGH This Week

Command Injection Apple Okta +1

NVD