high7.8

CVE-2022-35259

XML Injection with Endpoint Manager 2022.

Impact

XML Injection with Endpoint Manager 2022. 3 and below causing a download of a malicious file to run and possibly execute to gain unauthorized privileges.

Affected products

Vendor	Product	Affected versions
Ivanti	Endpoint Manager	through 2022.3

Weakness classification

CWE-91

References

NVD record
CVE.org record
https://forums.ivanti.com/s/article/Security-Advisory-for-Ivanti-Endpoint-Manager-Client-CVE-2022-35259?language=en_US
https://forums.ivanti.com/s/article/Security-Advisory-for-Ivanti-Endpoint-Manager-Client-CVE-2022-35259?language=en_US