CVE Program partner

SailPoint

SailPoint Technologies

API
CVEs, 365 days515 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationSailPoint Technologies
RoleCNA
TypeVendor
Reports tomitre
ScopeSailPoint issues only.
Advisorieshttps://www.sailpoint.com/security-advisories/

Latest CVEs · RSS

  • CVE-2026-12342 2026-09-28 · CVSS 9.6
    This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the IdentityIQ server due to improper input va
  • CVE-2026-12341 2026-07-20 · CVSS 8.8
    This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker unauthorized access to protected APIs and data due to improper vali
  • CVE-2026-5712 2026-04-29 · CVSS 8.0
    This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definiti
  • CVE-2026-4857 2026-04-15 · CVSS 8.4
    IdentityIQ 8.5, all IdentityIQ 8.5 patch levels prior to 8.5p2, IdentityIQ 8.4, and all IdentityIQ 8.4 patch levels prior to 8.4p4 allow authenticated users ass
  • CVE-2025-10280 2025-11-03 · CVSS 7.1
    IdentityIQ 8.5, IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p4, IdentityIQ 8.3 and all 8.3 patch levels including 8.3p5, and all prior versions allows s
  • CVE-2024-10905 2024-12-02 · CVSS 10.0
    IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p2, IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p5, IdentityIQ 8.2 and all 8.2 patch levels prior to
  • CVE-2024-3317 2024-05-15 · CVSS 6.5
    An improper access control was identified in the Identity Security Cloud (ISC) message server API that allowed an authenticated user to exfiltrate job processin
  • CVE-2024-3318 2024-05-15 · CVSS 4.2
    A file path traversal vulnerability was identified in the DelimitedFileConnector Cloud Connector that allowed an authenticated administrator to set arbitrary co
  • CVE-2024-3319 2024-05-15 · CVSS 9.1
    An issue was identified in the Identity Security Cloud (ISC) Transform preview and IdentityProfile preview API endpoints that allowed an authenticated administr
  • CVE-2024-2228 2024-03-22 · CVSS 7.1
    This vulnerability allows an authenticated user to perform a Lifecycle Manager flow or other QuickLink for a target user outside of the defined QuickLink Popula
  • CVE-2024-2227 2024-03-22 · CVSS 10.0
    This vulnerability allows access to arbitrary files in the application server file system due to a path traversal vulnerability in JavaServer Faces (JSF) 2.2.20
  • CVE-2024-1714 2024-02-21 · CVSS 7.1
    An issue exists in all supported versions of IdentityIQ Lifecycle Manager that can result if an entitlement with a value containing leading or trailing whitespa
  • CVE-2023-32217 2023-05-31 · CVSS 9.0
    IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p3, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p6, IdentityIQ 8.1 and all 8.1 patch levels prior to
  • CVE-2022-46835 2023-01-31 · CVSS 8.8
    IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, IdentityIQ 8.1 and all 8.1 patch levels prior to
  • CVE-2022-45435 2023-01-31 · CVSS 6.8
    IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, IdentityIQ 8.1 and all 8.1 patch levels prior to

All CVE Program partners