Lucene search
EsriCVELIST:CVE-2022-38208HistoryDec 30, 2022 - 5:13 a.m.
CVE-2022-38208 Unvalidated redirect in Portal for ArcGIS
2022-12-3005:13:00
CWE-601
Esri
www.cve.org
3
cve-2022-38208
unvalidated redirect
esri portal
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
44.9%
There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 11 and below that may allow a remote, unauthenticated attacker to craft a URL that could redirect a victim to an arbitrary website, simplifying phishing attacks.
CNA Affected
[
{
"vendor": "Esri",
"product": "ArcGIS Enterprise",
"versions": [
{
"version": "Portal for ArcGIS",
"status": "affected",
"lessThanOrEqual": "11.0",
"versionType": "custom"
}
],
"platforms": [
"x64"
]
}
]Related
nvd
nvd
CVE-2022-38208
2022-12-29 20:15:09
cve
cve
CVE-2022-38208
2022-12-30 05:13:00
prion
prion
Open redirect
2022-12-29 20:15:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
44.9%
Related for CVELIST:CVE-2022-38208