CVE-2025-10280 | SailPoint IdentityIQ up to 8.3p4/8.4p2/8.4 Content-Type cross site scripting

A vulnerability marked as problematic has been reported in SailPoint IdentityIQ up to 8.3p4/8.4p2/8.4. This affects an unknown function of the component Content-Type Handler. This manipulation causes cross site scripting.

This vulnerability appears as CVE-2025-10280. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More