iagona — Vulnerabilities & Security Advisories 4

Iagona provides cloud-based identity and access management solutions for enterprise environments. Historically, the platform has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, as evidenced by its four recorded CVEs. Security researchers have identified authentication bypass weaknesses and insecure direct object references in its API endpoints. While no major public security incidents have been widely reported, the consistent pattern of vulnerabilities in authentication and access control components suggests potential risks for organizations relying on the platform without implementing additional security controls.