Code injection

Changes to user permissions in Portal for ArcGIS 10.9.1 and below are incompletely applied in specific use cases. This issue may allow users to access content that they are no longer privileged to access...

Authorization Bypass

openjdk is vulnerable to authorizatino bypass. XML validation manipulation due to incomplete application of the use-grammar-pool-only feature allows an attacker to perform unauthorized update, insert and delete operations...

AppSense Environment Manager not personalizing apps

The AppSense Environment Manager can be used to personalize Unidesk Desktop features e.g. wallpaper across Desktops, but personalizing applications and fine-grained application management e.g. disabling printing from IE is not currently working out of the box. This is because AppSense only manage...