Lucene search
+L

567 matches found

CNNVD
CNNVD
added 2021/07/11 12:00 a.m.8 views

Esri Arcgis Server 跨站脚本漏洞

ArcGIS Server is the back-end server software component of ArcGIS Enterprise.ArcGIS Server Manager is an application that is installed with ArcGIS Server and provides an intuitive and convenient interface for managing the server. A stored cross-site scripting vulnerability exists in ArcGIS Server...

6.1CVSS5.2AI score0.0081EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/07/11 12:00 a.m.8 views

Esri Arcgis Server 代码问题漏洞

ArcGIS Server is the back-end server software component of ArcGIS Enterprise.ArcGIS Server Manager is an application that is installed with ArcGIS Server and provides an intuitive and convenient interface for managing the server. A server-side request forgery vulnerability exists in ArcGIS Server...

9.1CVSS5.6AI score0.0158EPSS
SaveExploits0References2
OSV
OSV
added 2021/07/10 3:15 p.m.7 views

CVE-2021-29107

A stored Cross Site Scripting XXS vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote unauthenticated attacker to pass and store malicious strings in the ArcGIS Server Manager application...

6.1CVSS6.4AI score0.00856EPSS
SaveExploits0References1
OSV
OSV
added 2021/07/10 3:15 p.m.10 views

CVE-2021-29106

A reflected Cross Site Scripting XSS vulnerability in Esri ArcGIS Server version 10.8.1 and below may allow a remote attacker able to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the user’s browser...

6.1CVSS6.1AI score0.00688EPSS
SaveExploits0References1
Prion
Prion
added 2021/07/10 3:15 p.m.22 views

Cross site scripting

A reflected Cross Site Scripting XSS vulnerability in Esri ArcGIS Server version 10.8.1 and below may allow a remote attacker able to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the user’s browser...

4.3CVSS4.9AI score0.00688EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2021/07/10 3:15 p.m.18 views

Cross site scripting

A stored Cross Site Scripting XXS vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote unauthenticated attacker to pass and store malicious strings in the ArcGIS Server Manager application...

4.3CVSS6.1AI score0.00856EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/07/10 2:26 p.m.97 views

CVE-2021-29106

Esri ArcGIS Server

6.1CVSS5.4AI score0.00688EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/07/10 2:26 p.m.10 views

CVE-2021-29106 There is a reflected Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server version 10.8.1 and below.

A reflected Cross Site Scripting XSS vulnerability in Esri ArcGIS Server version 10.8.1 and below may allow a remote attacker able to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the user’s browser...

4.7CVSS6.1AI score0.00688EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/07/10 2:26 p.m.37 views

CVE-2021-29106 There is a reflected Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server version 10.8.1 and below.

A reflected Cross Site Scripting XSS vulnerability in Esri ArcGIS Server version 10.8.1 and below may allow a remote attacker able to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the user’s browser...

4.7CVSS6.1AI score0.00688EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/07/10 2:23 p.m.6 views

CVE-2021-29107 There is a stored Cross Site Scripting (XXS) vulnerability in ArcGIS Server Manager version 10.8.1 and below.

A stored Cross Site Scripting XXS vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote unauthenticated attacker to pass and store malicious strings in the ArcGIS Server Manager application...

6.1CVSS6.4AI score0.00856EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/07/10 2:23 p.m.26 views

CVE-2021-29107 There is a stored Cross Site Scripting (XXS) vulnerability in ArcGIS Server Manager version 10.8.1 and below.

A stored Cross Site Scripting XXS vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote unauthenticated attacker to pass and store malicious strings in the ArcGIS Server Manager application...

6.1CVSS6.3AI score0.00856EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/07/10 12:00 a.m.8 views

Esri Arcgis Server 跨站脚本漏洞

ArcGIS Server is the back-end server software component of ArcGIS Enterprise.ArcGIS Server Manager is an application that is installed with ArcGIS Server and provides an intuitive and convenient interface for managing the server. A stored cross-site scripting vulnerability exists in ArcGIS Server...

6.1CVSS5.2AI score0.00856EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/07/10 12:00 a.m.13 views

Esri Arcgis Server 跨站脚本漏洞

ArcGIS Server is the back-end server software component of ArcGIS Enterprise from Esri that makes your geographic information available to others in your organization, and optionally makes it available to anyone with an Internet connection. A reflected cross-site scripting vulnerability exists in...

6.1CVSS5.7AI score0.00688EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/06/09 12:00 a.m.24 views

Esri Arcgis Server SQL Injection Vulnerability

Esri Arcgis Server is the United States Esri company's a Web-oriented can be used to provide geographic location services, enterprise-class software platform. A SQL injection vulnerability exists in ArcGIS Server version 10.8.1 and earlier versions, which can be exploited by attackers to obtain...

5.3CVSS7.5AI score0.00633EPSS
SaveExploits0References1
NCSC
NCSC
added 2021/06/08 12:00 a.m.9 views

Vulnerability fixed in ESRI ArcGIS Server

A vulnerability has been fixed in Esri ArcGIS Server. The vulnerability allows a remote malicious person to perform a SQL-Injection attack. Esri has released updates to fix the vulnerabilities. For more information, see: https://www.esri.com/arcgis-blog/products/arcgis-enterprise...

5.3CVSS6.9AI score0.00633EPSS
SaveExploits0
OSV
OSV
added 2021/06/07 12:15 p.m.9 views

CVE-2021-29099

A SQL injection vulnerability exists in some configurations of ArcGIS Server versions 10.8.1 and earlier. Specially crafted web requests can expose information that is not intended to be disclosed not customer datasets. Web Services that use file based data sources file Geodatabase or Shape Files...

5.3CVSS6AI score0.00633EPSS
SaveExploits0References1
NVD
NVD
added 2021/06/07 12:15 p.m.24 views

CVE-2021-29099

A SQL injection vulnerability exists in some configurations of ArcGIS Server versions 10.8.1 and earlier. Specially crafted web requests can expose information that is not intended to be disclosed not customer datasets. Web Services that use file based data sources file Geodatabase or Shape Files...

5.3CVSS0.00633EPSS
SaveExploits0References1
Prion
Prion
added 2021/06/07 12:15 p.m.24 views

Sql injection

A SQL injection vulnerability exists in some configurations of ArcGIS Server versions 10.8.1 and earlier. Specially crafted web requests can expose information that is not intended to be disclosed not customer datasets. Web Services that use file based data sources file Geodatabase or Shape Files...

5CVSS5.7AI score0.00633EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/06/07 11:47 a.m.8 views

CVE-2021-29099 There is a SQL injection vulnerability in ArcGIS Server

A SQL injection vulnerability exists in some configurations of ArcGIS Server versions 10.8.1 and earlier. Specially crafted web requests can expose information that is not intended to be disclosed not customer datasets. Web Services that use file based data sources file Geodatabase or Shape Files...

5.3CVSS7.5AI score0.00633EPSS
SaveExploits0References1
CVE
CVE
added 2021/06/07 11:47 a.m.76 views

CVE-2021-29099

ArcGIS Server (versions 10.8.1 and earlier) has a SQL injection vulnerability that can expose sensitive information via specially crafted requests. Web Services using file-based data sources are unaffected. Multiple sources (NVD, CNVD, NCSC) reference ESRI advisories and fixes; remediation is to ...

5.3CVSS5.6AI score0.00633EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder