An authenticated high privileged user can perform a stored XSS attack due to incorrect output encoding in Incapptic connect and affects all current versions.
[
{
"product": "Ivanti Incapptic Connect",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "A workaround has been published to fix this issue"
}
]
}
]