VULNERABILITY INTELLIGENCE

CVE-2022-35259

CVSS score7.8 HIGH
EPSS probability0.76%
CISA KEVNot currently listed
Published2022-12-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

XML Injection with Endpoint Manager 2022. 3 and below causing a download of a malicious file to run and possibly execute to gain unauthorized privileges.

Weakness classification

  • support@hackerone.com: CWE-91
  • nvd@nist.gov: CWE-91

Primary references