CVE-2022-35497 In Trimble TM4WEB 21.4.0.4 due to security… — CVE Notify — TG.ME

CVCVE Notify@cveNotify · 19.7K subscribersOpen in TelegramOpen

🚨 CVE-2022-35497
In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint.

🎖@cveNotify

t.me/cveNotify/285449

September 4, 2026 7