CVE-2023-0392

6.7 mediumEPSS 0.2%

Medium (6.7) in okta ldap agent. EPSS 0.2% chance of exploitation in the next 30 days.

The LDAP Agent Update service with versions prior to 5.18 used an unquoted path, which could allow arbitrary code execution.

Severity

6.7 medium

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
CWE: CWE-428
Published: 2023-11-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19