Lucene search
+L

2 matches found

NVD
NVD
added 2024/04/04 6:15 p.m.21 views

CVE-2024-25706

There is an HTML injection vulnerability in Esri Portal for ArcGIS 11.0 and below that may allow a remote, unauthenticated attacker to craft a URL which, when clicked, could potentially generate a message that may entice an unsuspecting victim to visit an arbitrary website. This could simplify...

6.1CVSS9.4AI score0.00425EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/04 5:55 p.m.29 views

CVE-2024-25706 HTMLi at createFolder Content Injection

There is an HTML injection vulnerability in Esri Portal for ArcGIS 11.0 and below that may allow a remote, unauthenticated attacker to craft a URL which, when clicked, could potentially generate a message that may entice an unsuspecting victim to visit an arbitrary website. This could simplify...

6.1CVSS0.00425EPSS
SaveExploits0References1
Rows per page
Query Builder