Skip to content

Identity & Access Management · head-to-head

Cisco Duo vs SailPoint

On-prem IAM/IGA/PAM/MFA: directories, federation, privileged access, SSO. Counts are scoped to this segment and the selected published-date window. SailPoint carries 9.0× the disclosed CVE volume of Cisco Duo. Volume reflects disclosure practice and install base as much as code quality — read it with the severity mix. Sourced from the NIST NVD; lower counts indicate a smaller disclosed vulnerability surface — not necessarily lower risk.

01

Disclosure record

Bars are normalized per row to the larger value; the leading count is emphasized.

Metric comparison: Cisco Duo versus SailPoint. Each row gives the metric, Cisco Duo’s count on the left and SailPoint’s count on the right.
Cisco DuoMetricSailPoint
1Total CVEs9
0Critical3
0High5
1Medium1
0Low0
2Open in latest9
02

Risk profile

Each severity band as a share of the vendor's own total — strips out raw volume so the profiles compare directly.

Cisco Duo

0.0% critical
Critical
00.0%
High
00.0%
Medium
1100.0%
Low
00.0%

SailPoint

33.3% critical
Critical
333.3%
High
555.6%
Medium
111.1%
Low
00.0%
03

Recent activity

Latest in-window disclosures per vendor, newest first. Each ID links to its NVD record.

Cisco Duo

Recent CVEs affecting Cisco Duo
CVESeverityCVSSPublished
CVE-2023-20207(opens NVD record)Medium
4.9
Jul 12, 2023

SailPoint

Recent CVEs affecting SailPoint
CVESeverityCVSSPublished
CVE-2026-5712(opens NVD record)High
8.0
Apr 29, 2026
CVE-2025-10280(opens NVD record)High
7.1
Nov 3, 2025
CVE-2024-10905(opens NVD record)Critical
10.0
Dec 2, 2024
CVE-2024-2228(opens NVD record)High
7.1
Mar 22, 2024
CVE-2024-2227(opens NVD record)Critical
10.0
Mar 22, 2024
CVE-2024-1714(opens NVD record)High
7.1
Feb 21, 2024

Track new CVEs for these vendors

Get an email the moment a new vulnerability is disclosed for the products you rely on.

Get alerts