CVE-2022-35259CWE-91

XML Injection with Endpoint Manager 2022

High · published December 5, 2022

CVSS v3.1
7.8
EPSS
1%
Percentile
54.9
In the wild
Unconfirmed
What it is

XML Injection with Endpoint Manager 2022. 3 and below causing a download of a malicious file to run and possibly execute to gain unauthorized privileges.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00763 · 54.9th percentile
Weakness
CWE-91 · XML Injection (aka Blind XPath Injection)
Published
2022-12-05T00:00Z
EPSS history
Timeline
  • 05 DEC 00:00Z
    XML Injection with Endpoint Manager 2022
    cvelistv5