CVE-2022-38186

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.8.1 and below which may allow a remote attacker able to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the victim’s browser...

CVE-2022-38186

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.8.1 and below which may allow a remote attacker able to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the victim’s browser...

Esri Portal For ArcGis 跨站脚本漏洞

Esri Portal For ArcGis is a component of Esri, Inc. that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. A security vulnerability exists in Esri Portal For ArcGis versions 10.8.1 and earlier, which stems from the presence of a...

PT-2022-24264 · Esri · Esri Portal For Arcgis

Name of the Vulnerable Software and Affected Versions: Esri Portal for ArcGIS versions prior to 10.9.0 Description: The issue allows an unauthenticated attacker to induce Esri Portal for ArcGIS to read arbitrary URLs because the "sharing/rest/content/features/analyze" endpoint is always accessibl...

Esri Portal For ArcGis 安全漏洞

Esri Portal For ArcGis is a component of Esri, Inc. that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. A security vulnerability exists in Esri Portal For ArcGis versions prior to 10.9.0 that stems from an anonymous user always...

PT-2022-24265 · Esri · Esri Portal For Arcgis

Name of the Vulnerable Software and Affected Versions: Esri Portal for ArcGIS version 10.9.1 Description: The issue is a reflected XSS vulnerability that may allow a remote attacker to convince a user to click on a crafted link, potentially executing arbitrary JavaScript code in the victim’s...

PT-2022-24269 · Esri · Esri Portal For Arcgis

Name of the Vulnerable Software and Affected Versions: Esri Portal for ArcGIS versions 10.9.0 and below Description: The issue is an HTML injection problem that may allow a remote, authenticated attacker to inject HTML into some locations in the home application. This could potentially be exploit...

Esri Portal For ArcGis 跨站脚本漏洞

Esri Portal For ArcGis is a component of Esri, Inc. that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. A security vulnerability exists in Esri Portal For ArcGis versions prior to 10.9.0, which stems from the presence of...

PT-2022-24263 · Esri · Esri Portal For Arcgis

Name of the Vulnerable Software and Affected Versions: Esri Portal for ArcGIS versions prior to 10.8.1 Description: The issue allows a remote attacker to potentially execute arbitrary JavaScript code in a victim's browser by convincing the user to click on a crafted link. This is due to a reflect...

Esri Portal For ArcGis 跨站脚本漏洞

Esri Portal For ArcGis is a component of Esri, Inc. that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. A security vulnerability exists in Esri Portal For ArcGis, which stems from stored cross-site scripting XSS in configurable...

CVE-2021-29118

An out-of-bounds read vulnerability exists when parsing a specially crafted file in Esri ArcReader 10.8.1 and earlier which allow an unauthenticated attacker to induce an information disclosure issue in the context of the current user...

CVE-2021-29117

A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader 10.8.1 and earlier allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user...

CVE-2021-29117

A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader 10.8.1 and earlier allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user...

CVE-2021-29118

An out-of-bounds read vulnerability exists when parsing a specially crafted file in Esri ArcReader 10.8.1 and earlier which allow an unauthenticated attacker to induce an information disclosure issue in the context of the current user...

CVE-2021-29112

An out-of-bounds read vulnerability exists when parsing a specially crafted file in Esri ArcReader 10.8.1 and earlier which allow an unauthenticated attacker to induce an information disclosure issue in the context of the current user...

Information disclosure

An out-of-bounds read vulnerability exists when parsing a specially crafted file in Esri ArcReader 10.8.1 and earlier which allow an unauthenticated attacker to induce an information disclosure issue in the context of the current user...

Design/Logic Flaw

A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader 10.8.1 and earlier allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user...

Information disclosure

An out-of-bounds read vulnerability exists when parsing a specially crafted file in Esri ArcReader 10.8.1 and earlier which allow an unauthenticated attacker to induce an information disclosure issue in the context of the current user...

CVE-2021-29117 arcreader use-after-free

A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader 10.8.1 and earlier allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user...

CVE-2021-29117 arcreader use-after-free

A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader 10.8.1 and earlier allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user...