Critical severity9.1NVD Advisory· Published May 15, 2024· Updated Apr 15, 2026

CVE-2024-3319

Description

An issue was identified in the Identity Security Cloud (ISC) Transform preview and IdentityProfile preview API endpoints that allowed an authenticated administrator to execute user-defined templates as part of attribute transforms which could allow remote code execution on the host.

Affected products

Sailpoint/Identity Security Cloudllm-create

Patches

Vulnerability mechanics

References

www.sailpoint.com/security-advisories/nvd

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000