Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-12342

SailPoint IdentityIQ Improper Form Validation Vulnerability

This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the IdentityIQ server due to improper input validation of submitted web service API content.

CVSS 3.1 · 9.6 Critical EPSS < 1% KEV · Not listed
Vendors
Sailpoint Technologies
Products
Identityiq
CVE-2026-12341

SailPoint IdentityIQ Improper Bearer Token Validation Vulnerability

This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker unauthorized access to protected APIs and data due to improper validation of OAuth bearer tokens.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Sailpoint Sailpoint Technologies
Products
Identityiq Identityiq
CVE-2026-5712

IdentityIQ Role Editor Incorrect Authorization Vulnerability

This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definition of a role without having an assigned capability that would allow role editing.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Sailpoint Sailpoint Technologies
Products
Identityiq Identityiq
CVE-2026-4857

SailPoint IdentityIQ Debug UI Incorrect Authorization

IdentityIQ 8.5, all IdentityIQ 8.5 patch levels prior to 8.5p2, IdentityIQ 8.4, and all IdentityIQ 8.4 patch levels prior to 8.4p4 allow authenticated users assigned the Debug Pages Read Only capability or any custom capability with the ViewAccessDebugPage SPRight to incorrectly create new IdentityIQ objects.  Until a remediating security fix or patches containing this security fix are installed, the Debug Pages Read Only capability and any custom capabilities that contain the ViewAccessDebugPage SPRight should be unassigned from all identities and workgroups.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Sailpoint Technologies
Products
Identityiq