description: XML Injection with Endpoint Manager 2022. 3 and below causing a download of a malicious file to run and possibly execute to gain unauthorized privileges.
problem types: XML Injection (CWE-91)
affected:
{
vendor: n/a
product: Ivanti Endpoint Manager
versions:
version: 2022.3 and below, status: affected
}