CVE-2022-35497
🔶 mediumSummary
In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint.
CVSS Score
-
EPSS Score
0.3
Exploit Probability
Published Date
2026-09-04
First Seen: 2026-09-05
Last Modified
2026-09-04
Source
NVD 🔗