Back to Database
Status published
High
CVE-2025-67505
Race condition in the Okta Java SDK
Vulnerability Description
Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response. This issue is fixed in version 20.0.1.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-67505
Credits & Attribution
No credits recorded in the NVD database.
References
More from okta
View All →CVE-2025-66033
Improper Memory Cleanup in the Okta Java SDK
Medium
5.3
CVE-2021-45094
Imprivata Privileged Access Management (formally Xton Privileged Access Management) 2.3.202112051108...
Medium
5.4
CVE-2021-28113
A command injection vulnerability in the cookieDomain and relayDomain parameters...
Medium
6.7
Affected Vendor
okta
View all reports →Affected Software
okta-sdk-java
Vulnerable Versions:
>= 11.0.0, < 20.0.1
Timeline
Official Publish:
December 10th, 2025
Last Modified:
December 11th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L