Skip to content
Sign in
7.8 High

CVE-2022-35259 XML Injection with Endpoint Manager 2022

Description

XML Injection with Endpoint Manager 2022. 3 and below causing a download of a malicious file to run and possibly execute to gain unauthorized privileges.

Affected products and versions

Product Affected versions Fixed in
Ivanti Endpoint Manager Versions not published

Other CVEs of Ivanti Endpoint Manager

The 2 CVEs of Ivanti Endpoint Manager →
CVE-2022-30121 The “LANDesk(R) Management Agent” service exposes a socket and once connected, it is possible to launch commands only… 6.7 Medium
Track this CVE