CVE-2022-38190: Improper Neutralization of Input During Web Page Generation

A stored Cross Site Scripting XSS vulnerability in Esri Portal for ArcGIS configurable apps may allow a remote, unauthenticated attacker to pass and store malicious strings via crafted queries which when accessed could potentially execute arbitrary JavaScript code in the user’s browser...

PT-2022-24268

Name of the Vulnerable Software and Affected Versions Esri Portal for ArcGIS affected versions not specified Description A stored Cross Site Scripting XSS issue in Esri Portal for ArcGIS configurable apps may allow a remote, unauthenticated attacker to pass and store malicious strings via crafted...

Esri Portal For ArcGis Cross-site Scripting Vulnerability

Esri Portal For ArcGis is a component of Esri, Inc. that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. A security vulnerability exists in Esri Portal For ArcGis, which stems from stored cross-site scripting XSS in configurable...