CVE-2025-67505

—

CVSS 3.1

8.4 high

EPSS

<1%p11

Published

Dec 10, 2025 (Dec 10, 2025)

Modified

Sep 15, 2026

Description

Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response. This issue is fixed in version 20.0.1.

Vendors: okta
Products: java management sdk
Ecosystems: maven
Weakness: CWE-362
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
GHSA: GHSA-j5gq-897m-2rff (high)

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.