GCVE - cpe:2.3:a:sailpoint:identityiq:8.1:-:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sailpoint:identityiq:8.1:-:*:*:*:*:*:*

part: a version: 8.1 update: -

Vendor	Sailpoint (`6a1c15da-d739-5b75-a086-13b5ee55862f`)
Product	Identityiq (`bd66fbfd-b9e0-5420-934e-b27cb1ae8b6f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-1714`	vulnerable	2026-06-08 06:27:14.165400	Access Request for Entitlement Values with Leading/Trailing Whitespace HIGH (7.1) An issue exists in all supported versions of IdentityIQ Lifecycle Manager that can result if an entitlement with a value containing leading or trailing whitespace is requested by an authenticated user in an access request. Published: 2024-02-21T16:57:19.298Z Updated: 2025-08-26T20:08:09.865Z Open on db.gcve.eu Reference links https://www.sailpoint.com/security-advisories/sailpoint-identityiq-access-request-for-entitlement-values-with-leading-trailing-whitespace-cve-2024-1714/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-32217`	vulnerable	2026-06-08 06:04:45.160748	SailPoint IdentityIQ Unsafe use of Reflection Vulnerability CRITICAL (9) IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p3, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p6, IdentityIQ 8.1 and all 8.1 patch levels prior to 8.1p7, IdentityIQ 8.0 and all 8.0 patch levels prior to 8.0p6 allow an authenticated user to invoke a Java constructor with no arguments or a Java constructor with a single Map argument in any Java class available in the IdentityIQ application classpath. Published: 2023-05-31T00:00:00.000Z Updated: 2025-01-10T15:40:35.132Z Open on db.gcve.eu Reference links https://www.sailpoint.com/security-advisories/sailpoint-identityiq-unsafe-use-of-reflection-vulnerability-cve-2023-32217/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-46835`	vulnerable	2026-06-08 05:50:39.595157	SailPoint IdentityIQ JavaServer File Path Traversal Vulnerability HIGH (8.8) IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, IdentityIQ 8.1 and all 8.1 patch levels prior to 8.1p7, IdentityIQ 8.0 and all 8.0 patch levels prior to 8.0p6 allow access to arbitrary files in the application server filesystem due to a path traversal vulnerability in JavaServer Faces (JSF) 2.2.20 documented in CVE-2020-6950. Published: 2023-01-31T00:00:00.000Z Updated: 2025-03-27T18:26:57.953Z Open on db.gcve.eu Reference links https://www.sailpoint.com/security-advisories/sailpoint-identityiq-file-traversal-vulnerability-cve-2022-46835/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-45435`	vulnerable	2026-06-08 05:50:36.327792	SailPoint IdentityIQ Access Control Bypass MEDIUM (6.8) IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, IdentityIQ 8.1 and all 8.1 patch levels prior to 8.1p7, IdentityIQ 8.0 and all 8.0 patch levels prior to 8.0p6, and all prior versions allow authenticated users assigned the Identity Administrator capability or any custom capability that contains the SetIdentityForwarding right to modify the work item forwarding configuration for identities other than the ones that should be allowed by Lifecycle Manager Quicklink Population configuration. Published: 2023-01-31T00:00:00.000Z Updated: 2025-03-27T18:28:39.509Z Open on db.gcve.eu Reference links https://www.sailpoint.com/security-advisories/sailpoint-identityiq-identity-forwarding-vulnerability-cve-2022-45435/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.