CVE-2026-12341
SailPoint IdentityIQ Improper Bearer Token Validation Vulnerability
CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th
This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker unauthorized access to protected APIs and data due to improper validation of OAuth bearer tokens.
| CWE | CWE-287 |
| Vendor | sailpoint technologies |
| Product | identityiq |
| Published | Jul 20, 2026 |
Stay Ahead of the Next One
Get instant alerts for sailpoint technologies identityiq
Be the first to know when new high vulnerabilities affecting sailpoint technologies identityiq are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
SailPoint Technologies / IdentityIQ
8.5 ≤ 8.5p1 8.4 ≤ 8.4p4 8.3 ≤ 8.3p5