CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Kitploit•added 2026/09/21 7:40 p.m.•8 views

CVE-2022-35497

In Trimble's TM4WEB =22.2.0 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint. Specifically, the three cookies used for maintaining sessions are UID, rstring...

5.8AI score0.00287EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2026/09/04 12:00 a.m.•1 views

CVE-2022-35497: Improper Neutralization of Input During Web Page Generation

In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint...

5.4CVSS5.7AI score0.00255EPSS

SaveExploits0References2

Vulnrichment•added 2026/09/04 12:00 a.m.•5 views

CVE-2022-35497

5.6AI score0.00255EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by