CVE-2022-22571 - AskarLabs CVE Database

CVE-2022-22571

Vendor N/A

Product Ivanti Incapptic Connect

Weakness CWE-79 · XSS

Published April 11, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

An authenticated high privileged user can perform a stored XSS attack due to incorrect output encoding in Incapptic connect and affects all current versions.

Key dates

02Disclosure timeline

April 11, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-22571 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2023-44315 CVE-2022-36098 XWiki Platform Mentions UI vulnerable to Cross-site Scripting CVE-2025-13701 Shabat Keeper <= 0.4.4 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF'] CVE-2023-38400 WordPress Enfold Theme <= 5.6.4 is vulnerable to Cross Site Scripting (XSS) CVE-2026-21618 Cross-site scripting (XSS) in OAuth Device Authorization screen