OneIdentity vulnerabilities
We track 3 vulnerabilities in OneIdentity products across 4 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 24, 2025.
Latest OneIdentity vulnerabilities
- 9.9 Critical severity
Identity Manager: Authentication Bypass by Assumed-Immutable Data
In One Identity Identity Manager 9.x before 9.3, an insecure direct object reference (IDOR) vulnerability allows privilege escalation. Only On-Premise installations are affected.
- 8.8 High severity
One Identity Password Manager before 5.13.1 allows Kiosk Escape.
One Identity Password Manager before 5.13.1 allows Kiosk Escape. This product enables users to reset their Active Directory passwords on the login screen of a Windows client. It launches a Chromium based browser in Kiosk mode to provide the reset functionality
- 7.5 High severity
Syslog-ng: Integer Overflow or Wraparound
An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denial of Service via crafted syslog input that is mishandled by the tcp or network function. syslog-ng Premium Edition 7.0.30 and syslog-ng