CVE-2022-35259

Description

XML Injection with Endpoint Manager 2022. 3 and below causing a download of a malicious file to run and possibly execute to gain unauthorized privileges.

Affected Platforms

Weakness Type

CWE-91, CWE-91

References

• https://forums.ivanti.com/s/article/Security-Advisory-for-Ivanti-Endpoint-Manage…
• https://forums.ivanti.com/s/article/Security-Advisory-for-Ivanti-Endpoint-Manage…