← Database

CVE-2022-35497

MEDIUM CVSS: 5.4 Published: 2026-09-04 Modified: 2026-09-14

Description

In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint.

Affected Platforms

Unknown

Weakness Type

CWE-79

References