One Identity — Vulnerabilities & Security Advisories 6

One Identity provides identity and access management solutions, focusing on privileged access control and user lifecycle management. Historically, its products have been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from improper input validation and insecure authentication mechanisms. The company maintains six CVEs on record, with notable issues including flaws that could allow unauthorized system access or elevation of privileges. While no major public security incidents have been widely reported, the consistent presence of authentication-related vulnerabilities in their software highlights the ongoing challenges in securing complex identity management platforms.