CVE-2022-1697: Okta Active Directory Agent

Low severity, CVSS 3.9. EPSS: 0.3% chance of exploitation in the next 30 days.

Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted path. Note: To remediate this vulnerability, you must uninstall Okta Active Directory Agent and reinstall Okta Active Directory Agent 3.12.0 or greater per the documentation.

Affected products

• Okta Active Directory Agent: version 3.8.0 only; version 3.9.0 only; version 3.10.0 only; version 3.11.0 only

Published 2022-09-06. Last modified 2026-06-17.