Security implication in SailPoint Identity Security Cloud IdentityProfile API Endpoints
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.1epss 0.8%
exploitation probability
0.8%top 45% of all CVEs
observed exploitation
nono source reports it
An issue was identified in the Identity Security Cloud (ISC) Transform preview and IdentityProfile preview API endpoints that allowed an authenticated administrator to execute user-defined templates as part of attribute transforms which could allow remote code execution on the host.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected products
SailPoint · Identity Security Cloud