esri portal for arcgis 10.9.1 vulnerabilities and exploits

(subscribe to this query)

6.1

CVSSv3

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1, 10.8.1 and 10.7.1 which may allow a remote, unauthenticated malicious user to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s brows...

Esri Portal For Arcgis 10.8.1 Esri Portal For Arcgis 10.7.1 Esri Portal For Arcgis 10.9.1

6.1

CVSSv3

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1, 10.8.1 and 10.7.1 which may allow a remote, unauthenticated malicious user to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s brows...

Esri Portal For Arcgis 10.8.1 Esri Portal For Arcgis 10.7.1 Esri Portal For Arcgis 10.9.1

6.1

CVSSv3

There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 11.0 and 10.9.1 that may allow a remote, unauthenticated malicious user to craft a URL that could redirect a victim to an arbitrary website, simplifying phishing attacks.

Esri Portal For Arcgis 10.9.1 Esri Portal For Arcgis 11.0

5.4

CVSSv3

Changes to user permissions in Portal for ArcGIS 10.9.1 and below are incompletely applied in specific use cases. This issue may allow users to access content that they are no longer privileged to access.

Esri Portal For Arcgis

6.1

CVSSv3

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1 and below which may allow a remote, unauthenticated malicious user to create a crafted link which when clicked could execute arbitrary JavaScript code in the victim’s browser.

Esri Portal For Arcgis

6.1

CVSSv3

There is a reflected HTML injection vulnerability in Esri Portal for ArcGIS versions 10.9.1 and below that may allow a remote, unauthenticated malicious user to create a crafted link which when clicked could render arbitrary HTML in the victim’s browser.

Esri Portal For Arcgis

7.5

CVSSv3

In some non-default installations of Esri Portal for ArcGIS versions 10.9.1 and below, a directory traversal issue may allow a remote, unauthenticated malicious user to traverse the file system and lead to the disclosure of sensitive data (not customer-published content).

Esri Portal For Arcgis

6.1

CVSSv3

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1 and below which may allow a remote remote, unauthenticated malicious user to create a crafted link which when clicked could execute arbitrary JavaScript code in the victim’s browser.

Esri Portal For Arcgis

6.1

CVSSv3

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1 which may allow a remote attacker able to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the victim’s browser.

Esri Portal For Arcgis

7.5

CVSSv3

Protections against potential Server-Side Request Forgery (SSRF) vulnerabilities in Esri Portal for ArcGIS versions 10.9.1 and below were not fully honored and may allow a remote, unauthenticated malicious user to forge requests to arbitrary URLs from the system, potentially lead...

Esri Portal For Arcgis

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook