567 matches found
CVE-2022-38200 BUG-000142376 - Reflected Cross-Site Scripting (XSS) vulnerability in ArcGIS Server.
A cross site scripting vulnerability exists in some map service configurations of ArcGIS Server versions 10.8.1 and 10.7.1. Specifically crafted web requests can execute arbitrary JavaScript in the context of the victim's browser...
CVE-2022-38200 BUG-000142376 - Reflected Cross-Site Scripting (XSS) vulnerability in ArcGIS Server.
A cross site scripting vulnerability exists in some map service configurations of ArcGIS Server versions 10.8.1 and 10.7.1. Specifically crafted web requests can execute arbitrary JavaScript in the context of the victim's browser...
PT-2022-24275 · Esri · Esri Arcgis Server
Name of the Vulnerable Software and Affected Versions: Esri ArcGIS Server services directory versions 10.9.1 and below Description: The issue is a reflected cross site scripting problem that may allow a remote, unauthenticated attacker to convince a user to click on a crafted link, potentially...
Esri ArcGIS Server 输入验证错误漏洞
Esri ArcGIS Server is a web-oriented, enterprise-class software platform for delivering geolocation services from Environmental Systems Research Institute Esri. An input validation error vulnerability exists in Esri ArcGIS Server version 10.9.1 and earlier, which stems from an unauthenticated...
Esri ArcGIS Server 路径遍历漏洞
Esri ArcGIS Server is a web-oriented, enterprise-class software platform for delivering geolocation services from Environmental Systems Research Institute Esri. A path traversal vulnerability exists in Esri ArcGIS Server version 10.9.1 and earlier, which stems from a path traversal issue that cou...
Esri Arcgis Server 跨站脚本漏洞
Esri Arcgis Server is a Web-oriented, enterprise-class software platform for delivering geolocation services from Environmental Systems Research Institute Esri. A security vulnerability exists in Esri Arcgis Server versions 10.8.1 and 10.7.1, which stems from a cross-site scripting vulnerability ...
Esri ArcGIS Server 跨站脚本漏洞
Esri ArcGIS Server is a Web-oriented, enterprise-class software platform for delivering geolocation services from Environmental Systems Research Institute Esri, Inc. A cross-site scripting vulnerability exists in Esri ArcGIS Server 10.9.1 and prior versions that stems from the presence of a...
PT-2022-24276 · Esri · Esri Arcgis Server
Name of the Vulnerable Software and Affected Versions: Esri ArcGIS Server affected versions not specified Description: A remote file download issue can occur in some capabilities of Esri ArcGIS Server web services, potentially allowing a remote, unauthenticated attacker to induce an unsuspecting...
Esri ArcGIS Server 跨站脚本漏洞
Esri ArcGIS Server is a web-oriented, enterprise-class software platform for delivering geolocation services from Environmental Systems Research Institute Esri. A cross-site scripting vulnerability exists in Esri ArcGIS Server version 10.9.1 and earlier, which stems from the presence of a...
PT-2022-24274 · Esri · Esri Arcgis Server
Name of the Vulnerable Software and Affected Versions: Esri ArcGIS Server versions 10.9.1 and below Description: The issue is related to an unvalidated redirect that may allow a remote, unauthenticated attacker to phish a user into accessing an attacker-controlled website via a crafted query...
PT-2022-24277 · Esri · Arcgis Server
Name of the Vulnerable Software and Affected Versions: ArcGIS Server versions 10.7.1 through 10.8.1 Description: A cross-site scripting issue exists in certain map service configurations, allowing specifically crafted web requests to execute arbitrary JavaScript in the context of the victim's...
Esri ArcGIS Server 安全漏洞
Esri ArcGIS Server is a Web-oriented, enterprise-class software platform for delivering geolocation services from Environmental Systems Research Institute Esri, Inc. A security vulnerability exists in Esri ArcGIS Server versions 10.9.1 and earlier, which stems from a possible remote file download...
The vulnerability of the ArcGIS Server server, related to improper handling of code generation, allows a attacker to execute arbitrary HTML code.
The vulnerability of ArcGIS Server is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary HTML code remotely...
The vulnerability of the ArcGIS Server server, related to the lack of measures taken to protect the website structure, allows attackers to execute cross-site scripting attacks.
The vulnerability of ArcGIS Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the ArcGIS Server server, related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.
The vulnerability of the ArcGIS Server server is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...
CVE-2021-29116
A stored Cross Site Scripting XSS vulnerability in Esri ArcGIS Server feature services versions 10.8.1 and 10.9 only feature services may allow a remote, unauthenticated attacker to pass and store malicious strings via crafted queries which when accessed could potentially execute arbitrary...
CVE-2021-29116
A stored Cross Site Scripting XSS vulnerability in Esri ArcGIS Server feature services versions 10.8.1 and 10.9 only feature services may allow a remote, unauthenticated attacker to pass and store malicious strings via crafted queries which when accessed could potentially execute arbitrary...
CVE-2021-29114
A SQL injection vulnerability in feature services provided by Esri ArcGIS Server 10.9 and below allows a remote, unauthenticated attacker to impact the confidentiality, integrity and availability of targeted services via specifically crafted queries...
CVE-2021-29114
A SQL injection vulnerability in feature services provided by Esri ArcGIS Server 10.9 and below allows a remote, unauthenticated attacker to impact the confidentiality, integrity and availability of targeted services via specifically crafted queries...