CVE-2022-38192

🗓️ 16 Aug 2022 17:10:09Reported by EsriType

cve🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 86 Views

A stored XSS vulnerability in Esri Portal for ArcGIS allows remote attackers to execute arbitrary JavaScript code

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-38192	16 Aug 202221:23	–	circl
CNNVD	Esri Portal for ArcGIS 跨站脚本漏洞	16 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-38192 There is a stored cross-site scripting (XSS) vulnerability in ArcGIS API for JavaScript.	16 Aug 202217:10	–	cvelist
EUVD	EUVD-2022-40785	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in ArcGis products	16 Aug 202200:00	–	ncsc
NVD	CVE-2022-38192	16 Aug 202217:15	–	nvd
OSV	CVE-2022-38192	16 Aug 202217:15	–	osv
Prion	Cross site scripting	16 Aug 202217:15	–	prion
Positive Technologies	PT-2022-24270	16 Aug 202200:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2022-38192: Improper Neutralization of Input During Web Page Generation	16 Aug 202200:00	–	rapid7

NVD

Node

esri portal_for_arcgisRange≤10.8.1

[
  {
    "platforms": [
      "x64"
    ],
    "product": "Portal for ArcGIS",
    "vendor": "Esri",
    "versions": [
      {
        "lessThanOrEqual": "10.8.1",
        "status": "affected",
        "version": "All",
        "versionType": "custom"
      }
    ]
  }
]