CVE-2022-22571

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

An authenticated high privileged user can perform a stored XSS attack due to incorrect output encoding in Incapptic connect and affects all current versions.

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
n/aIvanti Incapptic ConnectA workaround has been published to fix this issue

References

Timeline

Published
Apr 11, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-225728.8A non-admin user with user management permission can escalate his privilege to admin user via password reset functionality. The vulnerabilitCVE-2022-225768.1An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connectiCVE-2022-225776.1An XSS Vulnerability in Action Pack >= 5.2.0 and < 5.2.0 that could allow an attacker to bypass CSP for non HTML like responses.CVE-2022-225787.8A logic issue was addressed with improved validation. This issue is fixed in tvOS 15.3, iOS 15.3 and iPadOS 15.3, watchOS 8.4, macOS MontereCVE-2022-225797.8An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadOS 15.3, tvOS 15.3, SeCVE-2022-22584.3In affected versions of Octopus Deploy it is possible for a user to view Tagsets without being explicitly assigned permissions to view theseCVE-2022-225825.5A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed iCVE-2022-225835.5A permissions issue was addressed with improved validation. This issue is fixed in Security Update 2022-001 Catalina, macOS Monterey 12.2, mCVE-2022-225847.8A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.3, iOS 15.3 and iPadOS 15.3, watchOS 8.4, mCVE-2022-225857.5An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixeCVE-2022-225869.8An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.2. A malicious applicatioCVE-2022-225879.8A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.
CVE-2022-22571: Medium severity, CVSS 4.8 | Vulnix