SailPoint IdentityIQ 8.1 Patch 6
Approved changes feed: RSS · Atom
cpe:2.3:a:sailpoint:identityiq:8.1:patch6:*:*:*:*:*:*
part: a version: 8.1 update: patch6
| Vendor | Sailpoint (6a1c15da-d739-5b75-a086-13b5ee55862f) |
|---|---|
| Product | Identityiq (bd66fbfd-b9e0-5420-934e-b27cb1ae8b6f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-2228 |
vulnerable | 2026-06-08 06:33:30.673902 |
IdentityIQ Authorization of QuickLink Target Identities Vulnerability
HIGH (7.1)
This vulnerability allows an authenticated user to perform a Lifecycle Manager flow or other QuickLink for a target user outside of the defined QuickLink Population.
Published: 2024-03-22T15:50:09.729Z
Updated: 2024-08-01T19:03:39.121Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2227 |
vulnerable | 2026-06-08 06:33:30.662767 |
IdentityIQ JavaServer Faces File Path Traversal Vulnerability
CRITICAL (10)
This vulnerability allows access to arbitrary files in the application server file system due to a path traversal vulnerability in JavaServer Faces (JSF) 2.2.20 documented in CVE-2020-6950. The remediation for this vulnerability contained in this security fix provides additional changes to the remediation announced in May 2021 tracked by ETN IIQSAW-3585 and January 2024 tracked by IIQFW-336. This vulnerability in IdentityIQ is assigned CVE-2024-2227.
Published: 2024-03-22T15:43:12.869Z
Updated: 2024-08-01T19:03:39.142Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1714 |
vulnerable | 2026-06-08 06:27:14.171808 |
Access Request for Entitlement Values with Leading/Trailing Whitespace
HIGH (7.1)
An issue exists in all supported versions of IdentityIQ Lifecycle Manager that can result if an entitlement with a value containing leading or trailing whitespace is requested by an authenticated user in an access request.
Published: 2024-02-21T16:57:19.298Z
Updated: 2025-08-26T20:08:09.865Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46835 |
vulnerable | 2026-06-08 05:50:39.595576 |
SailPoint IdentityIQ JavaServer File Path Traversal Vulnerability
HIGH (8.8)
IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, IdentityIQ 8.1 and all 8.1 patch levels prior to 8.1p7, IdentityIQ 8.0 and all 8.0 patch levels prior to 8.0p6 allow access to arbitrary files in the application server filesystem due to a path traversal vulnerability in JavaServer Faces (JSF) 2.2.20 documented in CVE-2020-6950.
Published: 2023-01-31T00:00:00.000Z
Updated: 2025-03-27T18:26:57.953Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45435 |
vulnerable | 2026-06-08 05:50:36.331947 |
SailPoint IdentityIQ Access Control Bypass
MEDIUM (6.8)
IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, IdentityIQ 8.1 and all 8.1 patch levels prior to 8.1p7, IdentityIQ 8.0 and all 8.0 patch levels prior to 8.0p6, and all prior versions allow authenticated users assigned the Identity Administrator capability or any custom capability that contains the SetIdentityForwarding right to modify the work item forwarding configuration for identities other than the ones that should be allowed by Lifecycle Manager Quicklink Population configuration.
Published: 2023-01-31T00:00:00.000Z
Updated: 2025-03-27T18:28:39.509Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.