CVE-2022-35259: Ivanti Endpoint Manager

High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days.

XML Injection with Endpoint Manager 2022. 3 and below causing a download of a malicious file to run and possibly execute to gain unauthorized privileges.

Affected products

• Ivanti Endpoint Manager: up to and including 2022.3

Published 2022-12-05. Last modified 2026-06-17.