SailPoint IdentityIQ 8.3 Patch 5
Approved changes feed: RSS · Atom
cpe:2.3:a:sailpoint:identityiq:8.3:patch5:*:*:*:*:*:*
part: a version: 8.3 update: patch5
| Vendor | Sailpoint (6a1c15da-d739-5b75-a086-13b5ee55862f) |
|---|---|
| Product | Identityiq (bd66fbfd-b9e0-5420-934e-b27cb1ae8b6f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-10280 |
vulnerable | 2026-06-08 07:02:26.650478 |
Incorrect Content Type Cross-Site Scripting Vulnerability
HIGH (7.1)
IdentityIQ
8.5, IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p4, IdentityIQ 8.3 and
all 8.3 patch levels including 8.3p5, and all prior versions allows some
IdentityIQ web services that provide non-HTML content to be accessed via a URL
path that will set the Content-Type to HTML allowing a requesting browser to
interpret content not properly escaped to prevent Cross-Site Scripting (XSS).
Published: 2025-11-03T16:35:56.241Z
Updated: 2026-02-26T17:47:39.634Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.