Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-05541
HistoryApr 16, 2021 - 12:00 a.m.

Esri Arcgis Server Cross-Site Scripting Vulnerability

2021-04-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
esri arcgis server
cross-site scripting
vulnerability
injection
malicious html
javascript
geolocation services
enterprise software

EPSS

0.001

Percentile

31.2%

Esri Arcgis Server is a Web-oriented, enterprise-class software platform for geolocation services from Esri, Inc. A cross-site scripting vulnerability exists in Esri Arcgis Server versions prior to 10.9 and Enterprise versions prior to 10.9, which can be exploited to inject malicious HTML attributes into arbitrary JavaScript code.

EPSS

0.001

Percentile

31.2%

Related for CNVD-2022-05541