One Identity Onelogin
2 CVEs affecting One Identity Onelogin. Latest disclosed: 2025-09-14. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-59363 | High | 7.7 | 2025-09-14 | In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 (even though this secret should only be returned when a… |
CVE-2025-52924 | Medium | 4.0 | 2025-07-19 | In One Identity OneLogin before 2025.2.0, the SQL connection "application name" is set based on the value of an untrusted X-RequestId HTTP request header. |