Incapptic Connect (Ivanti) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 15 known versions, newest CVE from 2022-04-11. Vendor: Ivanti.

CVEs of Incapptic Connect

• CVE-2022-22571 - CVSS 4.8 (medium), 2022-04-11: An authenticated high privileged user can perform a stored XSS attack due to incorrect output encoding in Incapptic connect and affects all current versions.
• CVE-2022-22572 - CVSS 8.8 (high), 2022-04-11: A non-admin user with user management permission can escalate his privilege to admin user via password reset functionality. The vulnerability affects…
• CVE-2022-21828 - CVSS 7.2 (high), 2022-03-04: A user with high privilege access to the Incapptic Connect web console can remotely execute code on the Incapptic Connect server using a unspecified attack…