One Identity vulnerabilities
6 published CVEs name One Identity among the affected products.
- 6Published CVEs6 of them scored
- 0Last 12 monthspublished in the last year
- 2Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-59363
In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 (even though this secret should only be returned when…
One Identity · OneLogin
High7.7 - CVE-2025-52924
In One Identity OneLogin before 2025.2.0, the SQL connection "application name" is set based on the value of an untrusted X-RequestId HTTP request header.
One Identity · OneLogin
Medium4.0 - CVE-2025-27582
The Secure Password extension in One Identity Password Manager before 5.14.4 allows local privilege escalation. The issue arises from a flawed security…
One Identity · Password Manager
High7.6 - CVE-2025-34064
OneLogin AD Connector Log S3 Bucket Hijack Leading to Cross-Tenant Data Leakage
One Identity · OneLogin Active Directory Connector (ADC)
Critical9.0 - CVE-2025-34063
OneLogin AD Connector JWT Authentication Bypass via Exposed Signing Key
One Identity · OneLogin Active Directory Connector (ADC)
Critical10.0 - CVE-2025-34062
OneLogin AD Connector API Credential and Signing Key Exposure
One Identity · OneLogin Active Directory Connector (ADC)
Medium5.7