Security Advisory
CVE-2022-35497
N/A
UNKNOWN
Vulnerability Description
In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint.
Published Date
September 4, 2026
Official Source
NIST NVD Advisory