https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:08:25.615409+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-10280 CVE-2025-10280 — Incorrect Content Type Cross-Site Scripting Vulnerability 2026-10-02T11:08:25.633145+00:00

Affected: SailPoint Technologies IdentityIQ

IdentityIQ 8.5, IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p4, IdentityIQ 8.3 and all 8.3 patch levels including 8.3p5, and all prior versions allows some IdentityIQ web services that provide non-HTML content to be accessed via a URL path that will set the Content-Type to HTML allowing a requesting browser to interpret content not properly escaped to prevent Cross-Site Scripting (XSS).