Skip to content
NewA calmer, faster ZeroHour
Vulnerability3

CVE-2024-10905

CVSS 3.1
9.8 critical
EPSS
<1%p59
Published
·
Modified
Analyze CVE-2024-10905 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p2, IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p5, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p8, and all prior versions allow HTTP/HTTPS access to static content in the IdentityIQ application directory that should be protected.

Vendors
sailpoint
Products
identityiq
Weakness
CWE-66
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news

2 stories