One Identity Active Roles

• CVE-2025-59363 ↗HIGH 7.72025

  In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 (even though this secret should only be returned when an App is first created),

• CVE-2025-56689 ↗MEDIUM 4.62025

  One Identity by Quest Safeguard for Privileged Passwords Appliance 7.5.1.20903 is vulnerable to One Time Password (OTP)/Multifactor Authentication (MFA) bypass using response manipulation. An attacker…

• CVE-2025-52924 ↗MEDIUM 4.02025

  In One Identity OneLogin before 2025.2.0, the SQL connection "application name" is set based on the value of an untrusted X-RequestId HTTP request header.

• …and 16 more · see all on the vendor page →

No datasheets, whitepapers, case studies, videos, or demos linked yet.

• Oleria Trustfusion Platform · Oleria
• Omada Identity Cloud · Omada
• Omada Identity Omada Identity Cloud · Omada
• Omada Identity On-Premises Identity Governance · Omada
• One Identity Identity Manager · One Identity
• One Identity Safeguard · One Identity
• OneLogin Advanced Directory · OneLogin
• OneLogin Identity Lifecycle Management · OneLogin