Approved changes feed: RSS · Atom

cpe:2.3:a:ivanti:incapptic_connect:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIvanti (40b984ad-e54c-5e1b-9aa1-2a4cd4d61129)
ProductIncapptic Connect (43d5af1e-4462-5021-9cc6-8cfd29db25a6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-22572 vulnerable 2026-06-03 14:46:24.949654 Details available
A non-admin user with user management permission can escalate his privilege to admin user via password reset functionality. The vulnerability affects Incapptic Connect version < 1.40.1.
Published: 2022-04-11T19:38:13.000Z
Updated: 2024-08-03T03:14:55.850Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22571 vulnerable 2026-06-03 14:46:24.949250 Details available
An authenticated high privileged user can perform a stored XSS attack due to incorrect output encoding in Incapptic connect and affects all current versions.
Published: 2022-04-11T19:38:12.000Z
Updated: 2024-08-03T03:14:55.701Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.