Lucene search
+L

8 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2021-26366

Malware in sbrugna...

5.4CVSS5.5AI score0.00662EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/05/22 7:38 p.m.•17 views

CVE-2021-3012

A cross-site scripting XSS vulnerability in the Document Link of documents in ESRI Enterprise before 10.9 allows remote authenticated users to inject arbitrary JavaScript code via a malicious HTML attribute such as onerror in the URL field of the Parameters tab...

5.4CVSS5.3AI score0.00662EPSS
SaveExploits1References1
OSV
OSV
•added 2021/04/08 11:15 a.m.•17 views

CVE-2021-3012

A cross-site scripting XSS vulnerability in the Document Link of documents in ESRI Enterprise before 10.9 allows remote authenticated users to inject arbitrary JavaScript code via a malicious HTML attribute such as onerror in the URL field of the Parameters tab...

5.4CVSS6.2AI score0.00662EPSS
SaveExploits1References1
NVD
NVD
•added 2021/04/08 11:15 a.m.•26 views

CVE-2021-3012

A cross-site scripting XSS vulnerability in the Document Link of documents in ESRI Enterprise before 10.9 allows remote authenticated users to inject arbitrary JavaScript code via a malicious HTML attribute such as onerror in the URL field of the Parameters tab...

5.4CVSS0.00662EPSS
SaveExploits1References1
Prion
Prion
•added 2021/04/08 11:15 a.m.•35 views

Cross site scripting

A cross-site scripting XSS vulnerability in the Document Link of documents in ESRI Enterprise before 10.9 allows remote authenticated users to inject arbitrary JavaScript code via a malicious HTML attribute such as onerror in the URL field of the Parameters tab...

3.5CVSS5AI score0.00662EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2021/04/08 10:15 a.m.•99 views

CVE-2021-3012

The CVE-2021-3012 entry concerns a cross-site scripting (XSS) vulnerability in Esri ArcGIS Enterprise/Server prior to version 10.9. The flaw arises in the Document Link of documents, where remote authenticated users can inject arbitrary JavaScript by exploiting a malicious HTML attribute (e.g., o...

5.4CVSS5AI score0.00662EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/04/08 10:15 a.m.•30 views

CVE-2021-3012

A cross-site scripting XSS vulnerability in the Document Link of documents in ESRI Enterprise before 10.9 allows remote authenticated users to inject arbitrary JavaScript code via a malicious HTML attribute such as onerror in the URL field of the Parameters tab...

5.3AI score0.00662EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/08 12:00 a.m.•6 views

CVE-2021-3012: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the Document Link of documents in ESRI Enterprise before 10.9 allows remote authenticated users to inject arbitrary JavaScript code via a malicious HTML attribute such as onerror in the URL field of the Parameters tab...

5.4CVSS5.8AI score0.00662EPSS
SaveExploits1References2
Rows per page
Query Builder