What’s Vulnerable › Vulnerabilities

CVE-2022-22571

• Severity: medium (CVSS 4.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-04-11 · updated 2026-06-17
• Weakness: CWE-79

Description

An authenticated high privileged user can perform a stored XSS attack due to incorrect output encoding in Incapptic connect and affects all current versions.

Affected products

• Ivanti Incapptic Connect: through 1.40.3

References

• https://excellium-services.com/cert-xlm-advisory/cve-2022-22571/
• https://forums.ivanti.com/s/article/Security-Advisory-for-incapptic-Connect-SA-2022-03-11?language=en_US
• https://excellium-services.com/cert-xlm-advisory/cve-2022-22571/
• https://forums.ivanti.com/s/article/Security-Advisory-for-incapptic-Connect-SA-2022-03-11?language=en_US

Get alerted when CVE-2022-22571 or the next vulnerability affects your stack