CVE-2022-38196

🗓️ 25 Oct 2022 16:32:04Reported by EsriType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 72 Views

Esri ArcGIS Server 10.9.1 and earlier path traversal vulnerability allowing remote attackers to overwrite server directory

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2022-38196	25 Oct 202220:47	–	circl
CNNVD	Esri ArcGIS Server 路径遍历漏洞	25 Oct 202200:00	–	cnnvd
Cvelist	CVE-2022-38196 BUG-000150537 - ArcGIS Server has a local file inclusion (LFI) vulnerability	25 Oct 202216:32	–	cvelist
EUVD	EUVD-2022-40789	3 Oct 202520:07	–	euvd
NVD	CVE-2022-38196	25 Oct 202217:15	–	nvd
Prion	Path traversal	25 Oct 202217:15	–	prion
Vulnrichment	CVE-2022-38196 BUG-000150537 - ArcGIS Server has a local file inclusion (LFI) vulnerability	25 Oct 202216:32	–	vulnrichment

NVD

Node

esri arcgis_serverRange≤10.9.1

[
  {
    "vendor": "Esri",
    "product": "ArcGIS Server",
    "versions": [
      {
        "version": "All",
        "status": "affected",
        "lessThanOrEqual": "10.9.1",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "x64"
    ]
  }
]