Sailpoint
10 CVEs across 3 Sailpoint products. Browse Sailpoint vulnerabilities, severities, and proof-of-concept exploits.
Sailpoint products with known CVEs
Sailpoint CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-12341 | High | 8.8 | 2026-07-20 | This vulnerability
impacts all versions of IdentityIQ and allows an unauthenticated attacker
unauthorized access to protected APIs and data due to improper val… |
CVE-2026-5712 | High | 8.0 | 2026-04-29 | This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definit… |
CVE-2025-10280 | High | 7.1 | 2025-11-03 | IdentityIQ
8.5, IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p4, IdentityIQ 8.3 and
all 8.3 patch levels including 8.3p5, and all prior versions allows… |
CVE-2024-10905 | Critical | 10.0 | 2024-12-02 | IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p2, IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p5, IdentityIQ 8.2 and all 8.2 patch levels prior t… |
CVE-2024-3319 | Critical | 9.1 | 2024-05-15 | An issue was identified in the Identity Security Cloud (ISC) Transform preview and IdentityProfile preview API endpoints that allowed an authenticated administ… |
CVE-2024-3318 | Medium | 4.2 | 2024-05-15 | A file path traversal vulnerability was identified in the DelimitedFileConnector Cloud Connector that allowed an authenticated administrator to set arbitrary c… |
CVE-2024-3317 | Medium | 6.5 | 2024-05-15 | An improper access control was identified in the Identity Security Cloud (ISC) message server API that allowed an authenticated user to exfiltrate job processi… |
CVE-2024-2228 | High | 7.1 | 2024-03-22 | This vulnerability allows an authenticated user to perform a Lifecycle Manager flow or other QuickLink for a target user outside of the defined QuickLink Popul… |
CVE-2024-2227 | Critical | 10.0 | 2024-03-22 | This vulnerability allows access to arbitrary files in the application server file system due to a path traversal vulnerability in JavaServer Faces (JSF) 2.2.2… |
CVE-2024-1714 | High | 7.1 | 2024-02-21 | An issue exists in all supported versions of IdentityIQ Lifecycle Manager that can result if an entitlement with a value containing leading or trailing whitesp… |
CVE-2023-32217 | Critical | 9.0 | 2023-06-05 | IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p3, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p6, IdentityIQ 8.1 and all 8.1 patch levels prior t… |
CVE-2022-46835 | High | 8.8 | 2023-01-31 | IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, IdentityIQ 8.1 and all 8.1 patch levels prior t… |
CVE-2022-45435 | Medium | 6.8 | 2023-01-31 | IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, IdentityIQ 8.1 and all 8.1 patch levels prior t… |
CVE-2019-12889 | High | 7.0 | 2019-08-20 | An unauthenticated privilege escalation exists in SailPoint Desktop Password Reset 7.2. A user with local access to only the Windows logon screen can escalate… |