Ivanti Incapptic Connect vulnerabilities

3 vulnerabilities

Known vulnerabilities in Ivanti Incapptic Connect, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2022-21828ivantiincapptic_connect
EPSS score
3.96%
A user with high privilege access to the Incapptic Connect web console can remotely execute code on the Incapptic Connect server using a unspecified attack vector in Incapptic Connect version 1.40.0, 1.39.1, 1.39.0, 1.38.1, 1.38.0, 1.37.1, 1.37.0, 1.36.0, 1.35.5, 1.35.4 and 1.35.3.4.8CVE-2022-22571ivantiincapptic_connect
EPSS score
0.95%
An authenticated high privileged user can perform a stored XSS attack due to incorrect output encoding in Incapptic connect and affects all current versions.8.8CVE-2022-22572ivantiincapptic_connect
EPSS score
2.08%
A non-admin user with user management permission can escalate his privilege to admin user via password reset functionality. The vulnerability affects Incapptic Connect version < 1.40.1.