← Back

CVE-2026-12341

nvd nist
Published: Jul 20, 2026Modified: Jul 30, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker unauthorized access to protected APIs and data due to improper validation of OAuth bearer tokens.

Affected (14)

Sailpoint
1 product
Identityiq
Configuration A
14 vulnerable
Vulnerable SoftwareAffected Versions
Sailpoint
Identityiq
Before 8.3
Identityiq
Version 8.3
Identityiq
Version 8.3 patch1
Identityiq
Version 8.3 patch2
Identityiq
Version 8.3 patch3
Identityiq
Version 8.3 patch4
Identityiq
Version 8.3 patch5
Identityiq
Version 8.4
Identityiq
Version 8.4 patch1
Identityiq
Version 8.4 patch2
Identityiq
Version 8.4 patch3
Identityiq
Version 8.4 patch4
Identityiq
Version 8.5
Identityiq
Version 8.5 patch1

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (1)

Source: psirt@sailpoint.com
Vendor Advisory

Timeline

No history available yet.