https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-38492.htmlhttps://patchthecve.com/cve/CVE-2022-38492.htmlWed, 17 Jun 2026 04:56:44 +0000HIGH 7.7: An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03. One parameter allows SQL injection. Version 2022.1.110.1.02 fixes the vulnerability.https://patchthecve.com/cve/CVE-2022-38491.htmlhttps://patchthecve.com/cve/CVE-2022-38491.htmlWed, 17 Jun 2026 04:56:44 +0000HIGH 8.2: An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03. Part of the application does not implement protection against brute-force attacks. Version 2022.1.133.0 corrects this issue.https://patchthecve.com/cve/CVE-2022-38490.htmlhttps://patchthecve.com/cve/CVE-2022-38490.htmlWed, 17 Jun 2026 04:56:43 +0000CRITICAL 9.6: An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03. Some parameters allow SQL injection. Version 2022.1.110.1.02 corrects this issue.https://patchthecve.com/cve/CVE-2022-38489.htmlhttps://patchthecve.com/cve/CVE-2022-38489.htmlWed, 17 Jun 2026 04:56:43 +0000MEDIUM 4.8: An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03 It is prone to stored Cross-site Scripting (XSS). Version 2022.1.110.1.02 fixes the vulnerably.https://patchthecve.com/cve/CVE-2021-33231.htmlhttps://patchthecve.com/cve/CVE-2021-33231.htmlThu, 09 Jul 2026 01:16:54 +0000MEDIUM 5.4: Cross Site Scripting (XSS) vulnerability in New equipment page in EasyVista Service Manager 2018.1.181.1 allows remote attackers to run arbitrary code via the notes field.https://patchthecve.com/cve/CVE-2021-38560.htmlhttps://patchthecve.com/cve/CVE-2021-38560.htmlWed, 17 Jun 2026 04:02:21 +0000MEDIUM 6.1: Ivanti Service Manager 2021.1 allows reflected XSS via the appName parameter associated with ConfigDB calls, such as in RelocateAttachments.aspx.