SailPoint Technologies vulnerabilities
We track 5 vulnerabilities in SailPoint Technologies products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on September 28, 2026.
Latest SailPoint Technologies vulnerabilities
- 9.6 Critical severity
This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user…
This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the IdentityIQ server due to improper input validation of submitted web service API content.
- 9.8 Critical severity
IdentityIQ: Improper Authentication
This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker unauthorized access to protected APIs and data due to improper validation of OAuth bearer tokens.
- 8.8 High severity
IdentityIQ: Incorrect Authorization
This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definition of a role without having an assigned capability that would allow role editing.
- 8.4 High severity
IdentityIQ: Incorrect Authorization
IdentityIQ 8.5, all IdentityIQ 8.5 patch levels prior to 8.5p2, IdentityIQ 8.4, and all IdentityIQ 8.4 patch levels prior to 8.4p4 allow authenticated users assigned the Debug Pages Read Only capability or any custom capability with the ViewAccessDebugPage SPR
- 9.8 Critical severity
IdentityIQ: Improper Handling of File Names that Identify Virtual Resources
IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p2, IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p5, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p8, and all prior versions allow HTTP/HTTPS access to static content in the IdentityIQ applicati