description: An authenticated high privileged user can perform a stored XSS attack due to incorrect output encoding in Incapptic connect and affects all current versions.
problem types: Cross-site Scripting (XSS) - Stored (CWE-79)
affected:
{
product: Ivanti Incapptic Connect
vendor: n/a
versions:
status: affected, version: A workaround has been published to fix this issue
}