Vulnerability Database

318,389

Total vulnerabilities in the database

CVE-2024-1714

An issue exists in all supported versions of IdentityIQ Lifecycle Manager that can result if an entitlement with a value containing leading or trailing whitespace is requested by an authenticated user in an access request.

  • Published: Feb 21, 2024
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-1714
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.1
  • AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L

CWEs:

Software From Fixed in
sailpoint / identityiq 8.3 8.3.x
sailpoint / identityiq 8.3-patch1 8.3-patch1.x
sailpoint / identityiq 8.2-patch1 8.2-patch1.x
sailpoint / identityiq 8.2-patch2 8.2-patch2.x
sailpoint / identityiq 8.2-patch4 8.2-patch4.x
sailpoint / identityiq 8.2 8.2.x
sailpoint / identityiq 8.4 8.4.x
sailpoint / identityiq 8.1 8.1.x
sailpoint / identityiq 8.1-patch1 8.1-patch1.x
sailpoint / identityiq 8.1-patch2 8.1-patch2.x
sailpoint / identityiq 8.1-patch3 8.1-patch3.x
sailpoint / identityiq 8.1-patch4 8.1-patch4.x
sailpoint / identityiq 8.1-patch5 8.1-patch5.x
sailpoint / identityiq 8.1-patch6 8.1-patch6.x