One Identity / OneLogin

2 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2025-59363	In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 (even though this secret should only be returned when a…	HIGH	7.7	Sep 14, 2025
CVE-2025-52924	In One Identity OneLogin before 2025.2.0, the SQL connection "application name" is set based on the value of an untrusted X-RequestId HTTP request header.	MEDIUM	4.0	Jul 19, 2025

Rows per page

Showing 1 to 2 of 2 CVEs