Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-38209
HistoryDec 29, 2022 - 8:15 p.m.

Cross site scripting

2022-12-2920:15:00
PRIOn knowledge base
www.prio-n.com
6
xss
reflected
vulnerability
esri portal
remote attacker
crafted link
javascript

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.1%

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1 and below which may allow a remote, unauthenticated attacker to create a crafted link which when clicked could execute arbitrary JavaScript code in the victim’s browser.

CPENameOperatorVersion
portal_for_arcgisle10.9.1

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.1%

Related for PRION:CVE-2022-38209