Skip to content
OpenAdvisories

Vendor

SailPoint

15 known vulnerabilities.

Products

IdentityIQ 12 Identity Security Cloud 3
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.8
    CVE-2026-12341

    SailPoint IdentityIQ Improper Bearer Token Validation Vulnerability

    This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker unauthorized access to protected APIs and data due to improper validation of OAuth bearer tokens.

    SailPoint IdentityIQ
  • High 8.0
    CVE-2026-5712

    IdentityIQ Role Editor Incorrect Authorization Vulnerability

    This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definition of a role without having an assigned capability that would allow role editing.

    SailPoint IdentityIQ
  • High 8.4
    CVE-2026-4857

    SailPoint IdentityIQ Debug UI Incorrect Authorization

    IdentityIQ 8.5, all IdentityIQ 8.5 patch levels prior to 8.5p2, IdentityIQ 8.4, and all IdentityIQ 8.4 patch levels prior to 8.4p4 allow authenticated users assigned the Debug Pages Read Only capability or any custom capability with the ViewAccessDebugPage SP…

    SailPoint IdentityIQ
  • High 7.1
    CVE-2025-10280

    Incorrect Content Type Cross-Site Scripting Vulnerability

    IdentityIQ 8.5, IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p4, IdentityIQ 8.3 and all 8.3 patch levels including 8.3p5, and all prior versions allows some IdentityIQ web services that provide non-HTML content to be accessed via a URL path that will s…

    SailPoint IdentityIQ
  • High 7.1
    CVE-2024-2228

    IdentityIQ Authorization of QuickLink Target Identities Vulnerability

    This vulnerability allows an authenticated user to perform a Lifecycle Manager flow or other QuickLink for a target user outside of the defined QuickLink Population.

    SailPoint IdentityIQ
  • High 7.1
    CVE-2024-1714

    Access Request for Entitlement Values with Leading/Trailing Whitespace

    An issue exists in all supported versions of IdentityIQ Lifecycle Manager that can result if an entitlement with a value containing leading or trailing whitespace is requested by an authenticated user in an access request.

    SailPoint IdentityIQ
  • High 8.8
    CVE-2022-46835

    SailPoint IdentityIQ JavaServer File Path Traversal Vulnerability

    IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, IdentityIQ 8.1 and all 8.1 patch levels prior to 8.1p7, IdentityIQ 8.0 and all 8.0 patch levels prior to 8.0p6 allow access to arbitrary files in t…

    SailPoint IdentityIQ