Design/Logic Flaw

2022-12-0522:15:00

PRIOn knowledge base

www.prio-n.com

xml injection

endpoint manager 2022

download of malicious file

unauthorized privileges

nvd

8.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.6%

JSON

XML Injection with Endpoint Manager 2022. 3 and below causing a download of a malicious file to run and possibly execute to gain unauthorized privileges.

CPENameOperatorVersion
endpoint_managerle2022.3

CPE	Name	Operator	Version
	endpoint_manager	le	2022.3

References

forums.ivanti.com/s/article/Security-Advisory-for-Ivanti-Endpoint-Manager-Client-CVE-2022-35259?language=en_US