9.6

CVE-2026-12342

SailPoint IdentityIQ Improper Form Validation Vulnerability

This vulnerability
impacts all versions of IdentityIQ and allows an unauthenticated user remote
code execution on the IdentityIQ server due to improper input validation of
submitted web service API content.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerSailPoint Technologies
≫
Produkt IdentityIQ
Default Statusaffected
Version <= 8.5p2
Version 8.5
Status affected
Version <= 8.4p4
Version 8.4
Status affected
Version <= 8.3p5
Version 8.3
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.19% 0.08
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
psirt@sailpoint.com 9.6 2.8 6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://www.sailpoint.com/security-advisories/