Advisories · Technology

SailPoint Technologies IdentityIQ.

Every CVE that names SailPoint Technologies IdentityIQ among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-12342 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

SailPoint IdentityIQ Improper Form Validation Vulnerability
- SailPoint Technologies IdentityIQ
- CWE-20
Not analysed yet 28 Sept 2026
CVE-2026-12341 CVE record

CVSS 8.8 High

SailPoint IdentityIQ Improper Bearer Token Validation Vulnerability
- SailPoint Technologies IdentityIQ
- Authentication bypass
Not analysed yet 20 Jul 2026
CVE-2026-5712 CVE record

CVSS 8.0 High

IdentityIQ Role Editor Incorrect Authorization Vulnerability
- SailPoint Technologies IdentityIQ
- Broken access control
Not analysed yet 29 Apr 2026
CVE-2026-4857 CVE record

CVSS 8.4 High

SailPoint IdentityIQ Debug UI Incorrect Authorization
- SailPoint Technologies IdentityIQ
- Broken access control
Not analysed yet 15 Apr 2026
CVE-2025-10280 CVE record

CVSS 7.1 High

Incorrect Content Type Cross-Site Scripting Vulnerability
- SailPoint Technologies IdentityIQ
- Cross-site scripting (XSS)
Not analysed yet 3 Nov 2025
CVE-2024-10905 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

IdentityIQ Improper Access Control VulnerabilityIdentityIQ Improper Access Control Vulnerability
- SailPoint Technologies IdentityIQ
- CWE-66
Not analysed yet 2 Dec 2024