CVE-2026-12342

Published: Sep 28, 2026Modified: Sep 30, 2026

9.6

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 6.0

Source: psirt@sailpoint.com (Secondary)

Description

This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the IdentityIQ server due to improper input validation of submitted web service API content.

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (1)

https://www.sailpoint.com/security-advisories/

Source: psirt@sailpoint.com

Timeline

No history available yet.