Skip to content
OpenAdvisories

Vendor

SailPoint

9 known vulnerabilities.

Products

IdentityIQ 6 Identity Security Cloud 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-3317

    SailPoint Identity Security Cloud Improper Access Control

    An improper access control was identified in the Identity Security Cloud (ISC) message server API that allowed an authenticated user to exfiltrate job processing metadata (opaque messageIDs, work queue depth and counts) for other tenants.

    SailPoint Identity Security Cloud
  • Medium 4.2
    CVE-2024-3318

    SailPoint Identity Security Cloud Connector File Path Traversal Vulnerability

    A file path traversal vulnerability was identified in the DelimitedFileConnector Cloud Connector that allowed an authenticated administrator to set arbitrary connector attributes, including the “file“ attribute, which in turn allowed the user to access files …

    SailPoint Identity Security Cloud
  • Medium 6.8
    CVE-2022-45435

    SailPoint IdentityIQ Access Control Bypass

    IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, IdentityIQ 8.1 and all 8.1 patch levels prior to 8.1p7, IdentityIQ 8.0 and all 8.0 patch levels prior to 8.0p6, and all prior versions allow authen…

    SailPoint IdentityIQ