CVE-2022-35259

2022-12-0500:00:00

CWE-91

hackerone

www.cve.org

cve-2022-35259

endpoint manager

xml injection

unauthorized privileges

malicious file.

0.001 Low

EPSS

Percentile

26.6%

JSON

XML Injection with Endpoint Manager 2022. 3 and below causing a download of a malicious file to run and possibly execute to gain unauthorized privileges.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Ivanti Endpoint Manager",
    "versions": [
      {
        "version": "2022.3 and below",
        "status": "affected"
      }
    ]
  }
]