Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
esri portal for arcgis vulnerabilities and exploits
(subscribe to this query)
6.1
CVSSv3
CVE-2022-38208
There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 11 and below that may allow a remote, unauthenticated malicious user to craft a URL that could redirect a victim to an arbitrary website, simplifying phishing attacks.
Esri Portal For Arcgis
8.8
CVSSv3
CVE-2021-29108
There is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below that may allow a remote, authenticated attacker who is able to intercept and modify a SAML assertion to impersonate another account (XML Signature Wrap...
Esri Portal For Arcgis
6.1
CVSSv3
CVE-2021-29109
A reflected XSS vulnerability in Esri Portal for ArcGIS version 10.9 and below may allow a remote attacker able to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the user’s browser.
Esri Portal For Arcgis
5.4
CVSSv3
CVE-2021-29110
Stored cross-site scripting (XSS) issue in Esri Portal for ArcGIS may allow a remote unauthenticated malicious user to pass and store malicious strings in the home application.
Esri Portal For Arcgis
7.5
CVSSv3
CVE-2022-38187
Prior to version 10.9.0, the sharing/rest/content/features/analyze endpoint is always accessible to anonymous users, which could allow an unauthenticated malicious user to induce Esri Portal for ArcGIS to read arbitrary URLs.
Esri Portal For Arcgis
5.4
CVSSv3
CVE-2022-38189
A stored Cross Site Scripting (XSS) vulnerability in Esri Portal for ArcGIS may allow a remote, authenticated malicious user to pass and store malicious strings via crafted queries which when accessed could potentially execute arbitrary JavaScript code in the user’s browser...
Esri Portal For Arcgis -
6.1
CVSSv3
CVE-2022-38190
A stored Cross Site Scripting (XSS) vulnerability in Esri Portal for ArcGIS configurable apps may allow a remote, unauthenticated malicious user to pass and store malicious strings via crafted queries which when accessed could potentially execute arbitrary JavaScript code in the ...
Esri Portal For Arcgis
5.4
CVSSv3
CVE-2022-38191
There is an HTML injection issue in Esri Portal for ArcGIS versions 10.9.0 and below which may allow a remote, authenticated malicious user to inject HTML into some locations in the home application.
Esri Portal For Arcgis
9.6
CVSSv3
CVE-2022-38193
There is a code injection vulnerability in Esri Portal for ArcGIS versions 10.8.1 and below that may allow a remote, unauthenticated malicious user to pass strings which could potentially cause arbitrary code execution.
Esri Portal For Arcgis
7.5
CVSSv3
CVE-2022-38205
In some non-default installations of Esri Portal for ArcGIS versions 10.9.1 and below, a directory traversal issue may allow a remote, unauthenticated malicious user to traverse the file system and lead to the disclosure of sensitive data (not customer-published content).
Esri Portal For Arcgis
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30065
CVE-2024-5843
CVE-2024-30080
code execution
CVE-2024-4577
CVE-2024-26169
wireless
remote code execution
CVE-2024-36103
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
NEXT »