Security Advisory
CVE-2022-35499
7.1
HIGH
Vulnerability Description
In Trimble TM4WEB 21.4.0.4, the external bill viewer endpoint is vulnerable to reflected cross-site scripting via injection in a arbitrary parameter appended to the URL.
Published Date
September 4, 2026
Official Source
NIST NVD Advisory