Skip to content
WEB https://www.sailpoint.com/security-advisories/

WEB https://www.sailpoint.com/security-advisories/

www.sailpoint.com • September 29, 2026

SailPoint IdentityIQ Improper Bearer Token Validation Vulnerability – CVE-2026-12341

SailPoint IdentityIQ Role Editor Incorrect Authorization Vulnerability – CVE-2026-5712

SailPoint IdentityIQ Debug UI Incorrect Authorization Vulnerability - CVE-2026-4857

SailPoint IdentityIQ Incorrect Content Type Cross-Site Scripting Vulnerability – CVE-2025-10280

IdentityIQ Improper Access Control Vulnerability – CVE-2024-10905

Security implication in SailPoint Identity Security Cloud IdentityProfile API Endpoints – CVE-2024-3319

SailPoint Identity Security Cloud Connector File Path Traversal Vulnerability – CVE-2024-3318

SailPoint Identity Security Cloud Improper Access Control – CVE-2024-3317

SailPoint IdentityIQ Authorization of QuickLink Target Identities Vulnerability – CVE-2024-2228

SailPoint IdentityIQ JavaServer Faces File Path Traversal Vulnerability – CVE-2024-2227

SailPoint IdentityIQ Access Request for Entitlement Values with Leading/Trailing Whitespace – CVE-2024-1714

SailPoint IdentityIQ Unsafe use of Reflection Vulnerability- CVE-2023-32217

SailPoint IdentityIQ File Traversal Vulnerability - CVE-2022-46835

SailPoint IdentityIQ Identity Forwarding Vulnerability - CVE-2022-45435