A AegiFlow
HIGHCVSS 8.4EPSS 0.2%

CVE-2025-67505

CVE-2025-67505 updated by NVD

Published
2025-12-10
Modified
2026-09-27
EPSS percentile
11%
Sources
github-advisory, nvd

Summary

Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response. This issue is fixed in version 20.0.1.

Affected packages

EcosystemPackageAffected versionsFixed versions
Mavencom.okta.sdk:okta-sdk-root—20.0.1

Remediation: Upgrade to 20.0.1 or later.

References

Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.

EPSS scores provided by the FIRST.org Exploit Prediction Scoring System.