Identity Security Cloud
Approved changes feed: RSS · Atom
cpe:2.3:a:sailpoint:identity_security_cloud:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sailpoint (6a1c15da-d739-5b75-a086-13b5ee55862f) |
|---|---|
| Product | Identity Security Cloud (ddb1c5a9-bb5a-5a32-91b2-f0daddd85e06) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-3319 |
vulnerable | 2026-06-08 06:41:52.931599 |
Security implication in SailPoint Identity Security Cloud IdentityProfile API Endpoints
CRITICAL (9.1)
An issue was identified in the Identity Security Cloud (ISC) Transform preview and IdentityProfile preview API endpoints that allowed an authenticated administrator to execute user-defined templates as part of attribute transforms which could allow remote code execution on the host.
Published: 2024-05-15T15:44:26.537Z
Updated: 2024-08-16T15:01:04.733Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3318 |
vulnerable | 2026-06-08 06:41:52.931252 |
SailPoint Identity Security Cloud Connector File Path Traversal Vulnerability
MEDIUM (4.2)
A file path traversal vulnerability was identified in the DelimitedFileConnector Cloud Connector that allowed an authenticated administrator to set arbitrary connector attributes, including the “file“ attribute, which in turn allowed the user to access files uploaded for other sources.
Published: 2024-05-15T15:49:36.094Z
Updated: 2024-08-01T20:05:08.329Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3317 |
vulnerable | 2026-06-08 06:41:52.930832 |
SailPoint Identity Security Cloud Improper Access Control
MEDIUM (6.5)
An improper access control was identified in the Identity Security Cloud (ISC) message server API that allowed an authenticated user to exfiltrate job processing metadata (opaque messageIDs, work queue depth and counts) for other tenants.
Published: 2024-05-15T15:55:07.011Z
Updated: 2024-08-01T20:05:08.372Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.