Agents and Access Gateway
CVE-2022-1697: Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using…
Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted path.
Published
ExploitedNot in CISA KEV
Ransomware useNot reportedPer CISA
SeverityUnknown
EPSS0.25%Chance of exploitation in 30 days
Public exploitNot tracked
FixSee advisory
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Okta Active Directory Agent 3.8 | See the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted path. Note: To remediate this vulnerability, you must uninstall Okta Active Directory Agent and reinstall Okta Active Directory Agent 3.12.0 or greater per the documentation.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 12 Oct 2026.