Security Advisory

CVE-2022-35499

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-04 00:00:00

Last updated 2026-09-04 17:07:06

Assigner mitre

CVSS score 7.1

State PUBLISHED

Description

In Trimble TM4WEB 21.4.0.4, the external bill viewer endpoint is vulnerable to reflected cross-site scripting via injection in a arbitrary parameter appended to the URL.

← Browse all CVEs View on cve.org ↗