VYPR
← All advisories
Critical severity9.0NVD Advisory· Published Jun 5, 2023· Updated Jun 17, 2026

CVE-2023-32217

CVE-2023-32217

Description

IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p3, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p6, IdentityIQ 8.1 and all 8.1 patch levels prior to 8.1p7, IdentityIQ 8.0 and all 8.0 patch levels prior to 8.0p6 allow an authenticated user to invoke a Java constructor with no arguments or a Java constructor with a single Map argument in any Java class available in the IdentityIQ application classpath.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

19
  • Sailpoint/Identityiq19 versions
    cpe:2.3:a:sailpoint:identityiq:8.0:-:*:*:*:*:*:*+ 18 more
    • cpe:2.3:a:sailpoint:identityiq:8.0:-:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.0:patch1:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.0:patch2:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.0:patch3:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.0:patch4:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.1:-:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.1:patch1:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.1:patch2:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.1:patch3:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.1:patch4:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.1:patch5:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.2:-:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.2:patch1:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.2:patch2:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.2:patch4:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.3:-:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.3:patch1:*:*:*:*:*:*
    • (no CPE)range: <8.3p3, <8.2p6, <8.1p7, <8.0p6
    • (no CPE)range: 8.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.