Ivanti Incapptic Connect
3 CVEs affecting Ivanti Incapptic Connect. Latest disclosed: 2022-04-11. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-22572 | High | 8.8 | 2022-04-11 | A non-admin user with user management permission can escalate his privilege to admin user via password reset functionality. The vulnerability affects Incapptic… |
CVE-2022-21828 | High | 7.2 | 2022-03-04 | A user with high privilege access to the Incapptic Connect web console can remotely execute code on the Incapptic Connect server using a unspecified attack vec… |
CVE-2022-22571 | Medium | 4.8 | 2022-04-11 | An authenticated high privileged user can perform a stored XSS attack due to incorrect output encoding in Incapptic connect and affects all current versions. |