CVE-2022-35259 — n/a / Ivanti Endpoint Manager

CVE-2022-35259

n/a / Ivanti Endpoint Manager PUBLISHED

Description (CNA)

XML Injection with Endpoint Manager 2022. 3 and below causing a download of a malicious file to run and possibly execute to gain unauthorized privileges.

Affected (CNA)

Vendor / product	Versions
n/a / Ivanti Endpoint Manager	affected 2022.3 and below

CWE

CWE-91

References

https://forums.ivanti.com/s/article/Security-Advisory-for-Ivanti-Endpoint-Manager-Client-CVE-2022-35259?language=en_US

ADP enrichment

CVE

No English description supplied.

https://forums.ivanti.com/s/article/Security-Advisory-for-Ivanti-Endpoint-Manager-Client-CVE-2022-35259?language=en_US

CISA-ADP

No English description supplied.

No references supplied.