Lucene search
HistoryDec 29, 2022 - 8:15 p.m.
CVE-2022-38208
cve-2022-38208
esri portal
arcgis
unvalidated redirect
phishing attack
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
44.9%
There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 11 and below that may allow a remote, unauthenticated attacker to craft a URL that could redirect a victim to an arbitrary website, simplifying phishing attacks.
Affected configurations
Node
esriportal_for_arcgisRange≤11.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| esri | portal_for_arcgis | * | cpe:2.3:a:esri:portal_for_arcgis:*:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2022-38208
2022-12-30 05:13:00
cvelist
cvelist
CVE-2022-38208 Unvalidated redirect in Portal for ArcGIS
2022-12-30 05:13:00
prion
prion
Open redirect
2022-12-29 20:15:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
44.9%
Related for NVD:CVE-2022-38208