https://vulnogram.org/ Most recent CVEs assigned by SailPoint Technologies (sailpoint). https://vulnogram.org/seaview/icons/sailpoint.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-12342 https://vulnogram.org/CVE-2026-12342 This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the IdentityIQ server due to improper input validation of submitted web service API content. Critical Mon, 28 Sep 2026 15:45:21 GMT https://vulnogram.org/CVE-2026-12341 https://vulnogram.org/CVE-2026-12341 This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker unauthorized access to protected APIs and data due to improper validation of OAuth bearer tokens. High Network Exploitable Mon, 20 Jul 2026 18:22:36 GMT https://vulnogram.org/CVE-2026-5712 https://vulnogram.org/CVE-2026-5712 This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definition of a role without having an assigned capability that would allow role editing. High Wed, 29 Apr 2026 17:18:27 GMT https://vulnogram.org/CVE-2026-4857 https://vulnogram.org/CVE-2026-4857 IdentityIQ 8.5, all IdentityIQ 8.5 patch levels prior to 8.5p2, IdentityIQ 8.4, and all IdentityIQ 8.4 patch levels prior to 8.4p4 allow authenticated users assigned the Debug Pages Read Only capability or any custom capability with the ViewAccessDeb… High Wed, 15 Apr 2026 18:08:45 GMT https://vulnogram.org/CVE-2025-10280 https://vulnogram.org/CVE-2025-10280 IdentityIQ 8.5, IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p4, IdentityIQ 8.3 and all 8.3 patch levels including 8.3p5, and all prior versions allows some IdentityIQ web services that provide non-HTML content to be accessed via a URL path th… High Mon, 03 Nov 2025 16:35:56 GMT https://vulnogram.org/CVE-2024-10905 https://vulnogram.org/CVE-2024-10905 IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p2, IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p5, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p8, and all prior versions allow HTTP/HTTPS access to static content in the IdentityIQ… Critical Network Exploitable Mon, 02 Dec 2024 14:49:51 GMT https://vulnogram.org/CVE-2024-3317 https://vulnogram.org/CVE-2024-3317 An improper access control was identified in the Identity Security Cloud (ISC) message server API that allowed an authenticated user to exfiltrate job processing metadata (opaque messageIDs, work queue depth and counts) for other tenants. Medium Wed, 15 May 2024 15:55:07 GMT https://vulnogram.org/CVE-2024-3318 https://vulnogram.org/CVE-2024-3318 A file path traversal vulnerability was identified in the DelimitedFileConnector Cloud Connector that allowed an authenticated administrator to set arbitrary connector attributes, including the “file“ attribute, which in turn allowed the user to acce… Medium Wed, 15 May 2024 15:49:36 GMT https://vulnogram.org/CVE-2024-3319 https://vulnogram.org/CVE-2024-3319 An issue was identified in the Identity Security Cloud (ISC) Transform preview and IdentityProfile preview API endpoints that allowed an authenticated administrator to execute user-defined templates as part of attribute transforms which could allow r… Critical Wed, 15 May 2024 15:44:26 GMT https://vulnogram.org/CVE-2024-2228 https://vulnogram.org/CVE-2024-2228 This vulnerability allows an authenticated user to perform a Lifecycle Manager flow or other QuickLink for a target user outside of the defined QuickLink Population. High Fri, 22 Mar 2024 15:50:09 GMT https://vulnogram.org/CVE-2024-2227 https://vulnogram.org/CVE-2024-2227 This vulnerability allows access to arbitrary files in the application server file system due to a path traversal vulnerability in JavaServer Faces (JSF) 2.2.20 documented in CVE-2020-6950. The remediation for this vulnerability contained in this sec… Critical Network Exploitable Fri, 22 Mar 2024 15:43:12 GMT https://vulnogram.org/CVE-2024-1714 https://vulnogram.org/CVE-2024-1714 An issue exists in all supported versions of IdentityIQ Lifecycle Manager that can result if an entitlement with a value containing leading or trailing whitespace is requested by an authenticated user in an access request. High Wed, 21 Feb 2024 16:57:19 GMT https://vulnogram.org/CVE-2023-32217 https://vulnogram.org/CVE-2023-32217 IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p3, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p6, IdentityIQ 8.1 and all 8.1 patch levels prior to 8.1p7, IdentityIQ 8.0 and all 8.0 patch levels prior to 8.0p6 allow an authenticated user… Critical Wed, 31 May 2023 00:00:00 GMT https://vulnogram.org/CVE-2022-46835 https://vulnogram.org/CVE-2022-46835 IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, IdentityIQ 8.1 and all 8.1 patch levels prior to 8.1p7, IdentityIQ 8.0 and all 8.0 patch levels prior to 8.0p6 allow access to arbitrary f… High Tue, 31 Jan 2023 00:00:00 GMT https://vulnogram.org/CVE-2022-45435 https://vulnogram.org/CVE-2022-45435 IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, IdentityIQ 8.1 and all 8.1 patch levels prior to 8.1p7, IdentityIQ 8.0 and all 8.0 patch levels prior to 8.0p6, and all prior versions all… Medium Tue, 31 Jan 2023 00:00:00 GMT