CVE-2022-1697

—

CVSS 3.1

3.9 low

EPSS

<1%p17

Published

Sep 6, 2022 (Sep 6, 2022)

Modified

Jun 17, 2026

Description

Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted path. Note: To remediate this vulnerability, you must uninstall Okta Active Directory Agent and reinstall Okta Active Directory Agent 3.12.0 or greater per the documentation.

Vendors: okta
Products: active directory agent
Weakness: CWE-428
Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.