CVE-2022-22571

Опубликовано: 11 апр. 2022

Источник: nvd

CVSS3: 4.8

CVSS2: 3.5

EPSS Низкий

Описание

An authenticated high privileged user can perform a stored XSS attack due to incorrect output encoding in Incapptic connect and affects all current versions.

Ссылки

https://excellium-services.com/cert-xlm-advisory/cve-2022-22571/
Third Party Advisory
https://forums.ivanti.com/s/article/Security-Advisory-for-incapptic-Connect-SA-2022-03-11?language=en_US
Mitigation
Vendor Advisory
https://excellium-services.com/cert-xlm-advisory/cve-2022-22571/
Third Party Advisory
https://forums.ivanti.com/s/article/Security-Advisory-for-incapptic-Connect-SA-2022-03-11?language=en_US
Mitigation
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ivanti:incapptic_connect:*:*:*:*:*:*:*:*

Версия до 1.40.3 (включая)

EPSS

Процентиль: 35%

0.00146

Низкий

4.8 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-h7wf-wcjm-66gh