CVE-2025-67505: Okta Java Management SDK

High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response. This issue is fixed in version 20.0.1.

Affected products

• Okta Java Management SDK: from 11.0.0, before 20.0.1 (fixed in 20.0.1)

Published 2025-12-10. Last modified 2026-09-25.