esri portal for arcgis 10.8.1 vulnerabilities and exploits

(subscribe to this query)

6.1

CVSSv3

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1, 10.8.1 and 10.7.1 which may allow a remote, unauthenticated malicious user to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s brows...

Esri Portal For Arcgis 10.8.1 Esri Portal For Arcgis 10.7.1 Esri Portal For Arcgis 10.9.1

6.1

CVSSv3

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1, 10.8.1 and 10.7.1 which may allow a remote, unauthenticated malicious user to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s brows...

Esri Portal For Arcgis 10.8.1 Esri Portal For Arcgis 10.7.1 Esri Portal For Arcgis 10.9.1

6.1

CVSSv3

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.8.1 and 10.7.1 which may allow a remote, unauthenticated malicious user to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser.

Esri Portal For Arcgis 10.8.1 Esri Portal For Arcgis 10.7.1

6.1

CVSSv3

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.8.1 and 10.7.1 which may allow a remote remote, unauthenticated malicious user to create a crafted link which when clicked which could execute arbitrary JavaScript code in the victim’s browser.

Esri Portal For Arcgis 10.8.1 Esri Portal For Arcgis 10.7.1

5.5

CVSSv3

In Esri Portal for ArcGIS versions 10.8.1, a system property is not properly encrypted. This may lead to a local user reading sensitive information from a properties file.

Esri Portal For Arcgis 10.8.1

9.6

CVSSv3

There is a code injection vulnerability in Esri Portal for ArcGIS versions 10.8.1 and below that may allow a remote, unauthenticated malicious user to pass strings which could potentially cause arbitrary code execution.

Esri Portal For Arcgis

7.5

CVSSv3

There is an improper access control vulnerability in Portal for ArcGIS versions 10.8.1 and below which could allow a remote, unauthenticated malicious user to access an API that may induce Esri Portal for ArcGIS to read arbitrary URLs.

Esri Portal For Arcgis

6.1

CVSSv3

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.8.1 and below which may allow a remote attacker able to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the victim’s browser.

Esri Portal For Arcgis

5.4

CVSSv3

There is a Cross-site Scripting vulnerability in Esri Portal Sites in versions 10.8.1 – 10.9 that may allow a remote, authenticated malicious user to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victims browser. The pr...

Esri Portal For Arcgis

7.5

CVSSv3

Protections against potential Server-Side Request Forgery (SSRF) vulnerabilities in Esri Portal for ArcGIS versions 10.8.1 and below were not fully honored and may allow a remote, unauthenticated malicious user to forge requests to arbitrary URLs from the system, potentially lead...

Esri Portal For Arcgis

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook