CVE-2022-35259 - AskarLabs CVE Database

CVE-2022-35259

Vendor N/A

Product Ivanti Endpoint Manager

Weakness CWE-91 · XML injection

Published December 5, 2022

Last update April 24, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

XML Injection with Endpoint Manager 2022. 3 and below causing a download of a malicious file to run and possibly execute to gain unauthorized privileges.

Key dates

02Disclosure timeline

December 5, 2022 CVE published

April 24, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-35259 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/91.html

Related vulnerabilities

04Related CVE

CVE-2024-53675 CVE-2021-36028 Magento Commerce XML Injection Vulnerability Could Lead To Remote Code Execution CVE-2026-1554 Central Authentication System (CAS) Server - Less critical - XML Element Injection - SA-CONTRIB-2026-007 CVE-2026-47273 pam_usb: XPath injection via PAM-supplied identifiers in pam_usb configuration queries CVE-2025-54251 Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91)