SailPoint IdentityIQ 8.4 Patch 2
Approved changes feed: RSS · Atom
cpe:2.3:a:sailpoint:identityiq:8.4:patch2:*:*:*:*:*:*
part: a version: 8.4 update: patch2
| Vendor | Sailpoint (6a1c15da-d739-5b75-a086-13b5ee55862f) |
|---|---|
| Product | Identityiq (bd66fbfd-b9e0-5420-934e-b27cb1ae8b6f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-5712 |
vulnerable | 2026-06-08 08:07:04.013239 |
IdentityIQ Role Editor Incorrect Authorization Vulnerability
HIGH (8)
This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definition of a role without having an assigned capability that would allow role editing.
Published: 2026-04-29T17:18:27.748Z
Updated: 2026-04-30T03:56:06.567Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10280 |
vulnerable | 2026-06-08 07:02:26.653678 |
Incorrect Content Type Cross-Site Scripting Vulnerability
HIGH (7.1)
IdentityIQ
8.5, IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p4, IdentityIQ 8.3 and
all 8.3 patch levels including 8.3p5, and all prior versions allows some
IdentityIQ web services that provide non-HTML content to be accessed via a URL
path that will set the Content-Type to HTML allowing a requesting browser to
interpret content not properly escaped to prevent Cross-Site Scripting (XSS).
Published: 2025-11-03T16:35:56.241Z
Updated: 2026-02-26T17:47:39.634Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.