← Database

CVE-2022-35499

HIGH CVSS: 7.1 Published: 2026-09-04 Modified: 2026-09-08

Description

In Trimble TM4WEB 21.4.0.4, the external bill viewer endpoint is vulnerable to reflected cross-site scripting via injection in a arbitrary parameter appended to the URL.

Affected Platforms

Unknown

Weakness Type

CWE-79

References