CVEvulnerability

CVE-2026-12341

9.8 CRITICAL Published 2026-07-20 Modified 2026-10-24 Official page ↗
Status
Analyzed
Published
2026-07-20
Last modified
2026-10-24
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-287

Description

This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker unauthorized access to protected APIs and data due to improper validation of OAuth bearer tokens.

Affected configurations

• sailpoint identityiq (< 8.3) • sailpoint identityiq 8.3 • sailpoint identityiq 8.4 • sailpoint identityiq 8.5

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References