Security Advisories

View latest advisories

Legal Disclaimer

• SailPoint IdentityIQ Debug UI Incorrect Authorization Vulnerability - CVE-2026-4857
• IdentityIQ Improper Access Control Vulnerability – CVE-2024-10905
• SailPoint IdentityIQ Incorrect Content Type Cross-Site Scripting Vulnerability – CVE-2025-10280
• SailPoint IdentityIQ Identity Forwarding Vulnerability - CVE-2022-45435
• SailPoint IdentityIQ File Traversal Vulnerability - CVE-2022-46835
• SailPoint IdentityIQ Unsafe use of Reflection Vulnerability- CVE-2023-32217
• SailPoint IdentityIQ Access Request for Entitlement Values with Leading/Trailing Whitespace – CVE-2024-1714
• SailPoint IdentityIQ JavaServer Faces File Path Traversal Vulnerability – CVE-2024-2227
• SailPoint IdentityIQ Authorization of QuickLink Target Identities Vulnerability – CVE-2024-2228
• SailPoint Identity Security Cloud Improper Access Control – CVE-2024-3317
• SailPoint Identity Security Cloud Connector File Path Traversal Vulnerability – CVE-2024-3318
• Security implication in SailPoint Identity Security Cloud IdentityProfile API Endpoints – CVE-2024-3319