CVE-2022-35497
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Sep 04, 2026
Vendor
unknown
Description
In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint.