Vulnerability Database

318,389

Total vulnerabilities in the database

CVE-2024-10905

IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p2, IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p5, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p8, and all prior versions allow HTTP/HTTPS access to static content in the IdentityIQ application directory that should be protected.

  • Published: Dec 2, 2024
  • Updated: Nov 13, 2025
  • CVE: CVE-2024-10905
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 10
  • AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CWEs:

Software From Fixed in
sailpoint / identityiq - 8.2
sailpoint / identityiq 8.2 8.2.x
sailpoint / identityiq 8.2-patch1 8.2-patch1.x
sailpoint / identityiq 8.2-patch2 8.2-patch2.x
sailpoint / identityiq 8.2-patch4 8.2-patch4.x
sailpoint / identityiq 8.2-patch5 8.2-patch5.x
sailpoint / identityiq 8.2-patch7 8.2-patch7.x
sailpoint / identityiq 8.3 8.3.x
sailpoint / identityiq 8.3-patch1 8.3-patch1.x
sailpoint / identityiq 8.3-patch2 8.3-patch2.x
sailpoint / identityiq 8.3-patch4 8.3-patch4.x
sailpoint / identityiq 8.4 8.4.x
sailpoint / identityiq 8.4-patch1 8.4-patch1.x