What’s Vulnerable › Products

SailPoint IdentityIQ vulnerabilities

12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your SailPoint IdentityIQ version is affected

Latest SailPoint IdentityIQ vulnerabilities

• CVE-2026-12342 — SailPoint IdentityIQ Improper Form Validation Vulnerability (CVSS 9.6)
• CVE-2026-12341 — SailPoint IdentityIQ Improper Bearer Token Validation Vulnerability (CVSS 9.8)
• CVE-2026-5712 — IdentityIQ Role Editor Incorrect Authorization Vulnerability (CVSS 8.8)
• CVE-2026-4857 — SailPoint IdentityIQ Debug UI Incorrect Authorization (CVSS 8.4)
• CVE-2025-10280 — Incorrect Content Type Cross-Site Scripting Vulnerability (CVSS 6.1)
• CVE-2024-10905 — IdentityIQ Improper Access Control VulnerabilityIdentityIQ Improper Access Control Vulnerability (CVSS 9.8)
• CVE-2024-2228 — IdentityIQ Authorization of QuickLink Target Identities Vulnerability (CVSS 8.8)
• CVE-2024-2227 — IdentityIQ JavaServer Faces File Path Traversal Vulnerability (CVSS 7.5)
• CVE-2024-1714 — Access Request for Entitlement Values with Leading/Trailing Whitespace (CVSS 7.1)
• CVE-2023-32217 — SailPoint IdentityIQ Unsafe use of Reflection Vulnerability (CVSS 8.8)
• CVE-2022-46835 — SailPoint IdentityIQ JavaServer File Path Traversal Vulnerability (CVSS 7.5)
• CVE-2022-45435 — SailPoint IdentityIQ Access Control Bypass (CVSS 6.5)