CVE-2022-35259

CVE-2022-35259 is an XML Injection vulnerability affecting Ivanti Endpoint Manager 2022.3 and earlier, which could allow an attacker to download and potentially execute a malicious file, leading to unauthorized privilege escalation. With a CVSS score of 7.8 (High), this vulnerability has a local attack vector, low attack complexity, and high impacts on confidentiality, integrity, and availability. While the EPSS score is low and there is no evidence of active exploitation, nor publicly available exploit code in Metasploit, Nuclei, or ExploitDB, organizations using affected versions should still prioritize patching. There is also minimal community discussion or media coverage surrounding this CVE.