CVE-2025-67505
High · 8.4CVSS
8.4
EPSS
0.2%
Published
Dec 10, 2025
CISA due date
—
The record
Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response. This issue is fixed in version 20.0.1.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | com.okta.sdk:okta-sdk-root | 11.0.0 | 20.0.1 |
| maven | com.okta.sdk/okta-sdk-root | 11.0.0 | 20.0.1 |
Related vulnerabilities
- GHSA-j5gq-897m-2rff Race condition in the Okta Java SDK Same vulnerability
- CVE-2025-66033 Okta Java Management SDK facilitates interactions with the Okta management API. Also affects com.okta.sdk:okta-sdk-root
- GHSA-qhr6-6cgv-6638 Improper Memory Cleanup in the Okta Java SDK Also affects com.okta.sdk:okta-sdk-root
- CVE-2026-114641 Traefik 2.11.x before 2.11.58 and 3.x before 3.7.14 contains a race condition in NTLM and… CWE-362
- CVE-2026-109279 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronization when… CWE-362
- CVE-2026-97032 HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder… CWE-362
- CVE-2026-98163 In the Linux kernel, the following vulnerability has been resolved: cgroup: Avoid… CWE-362
- CVE-2026-98146 In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Remove… CWE-362