CVE-2022-35259

XML Injection with Endpoint Manager 2022. 3 and below causing a download of a malicious file to run and possibly execute to gain unauthorized privileges.

Score

CVSS 3.1 7.8 High

Status

Modified - support@hackerone.com

Published

2022-12-05

Last modified

2025-04-24

Weaknesses

CWE-91

Affected products

• Endpoint Manager (Ivanti)

References

• https://forums.ivanti.com/s/article/Security-Advisory-for-Ivanti-Endpoint-Manager-Client-CVE-2022-35259?language=en_US