Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
arcgis vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-25840
There is a Cross-site Scripting vulnerability in ArcGIS Server in versions 10.8.1 – 11.1 that may allow a remote, authenticated malicious user to create a crafted link which onmouseover wont execute but could potentially render an image in the victims browser. The privileg...
Esri Arcgis Server
NA
CVE-2023-25841
There is a stored Cross-site Scripting vulnerability in Esri ArcGIS Server versions 10.8.1 – 11.0 on Windows and Linux platforms that may allow a remote, unauthenticated malicious user to create crafted content which when clicked could potentially execute arbitrary JavaScr...
Esri Arcgis Server
NA
CVE-2023-25836
There is a Cross-site Scripting vulnerability in Esri Portal Sites in versions 10.8.1 – 10.9 that may allow a remote, authenticated malicious user to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victims browser. The pr...
Esri Portal For Arcgis
NA
CVE-2023-25837
There is a Cross-site Scripting vulnerability in Esri ArcGIS Enterprise Sites versions 10.8.1 – 10.9 that may allow a remote, authenticated malicious user to create a crafted link which when clicked by a victim could potentially execute arbitrary JavaScript code in the tar...
Esri Portal For Arcgis
NA
CVE-2023-25835
There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.8.1 – 11.1 that may allow a remote, authenticated malicious user to create a crafted link that is stored in the site configuration which when clicked could potential...
Esri Portal For Arcgis
NA
CVE-2023-25839
There is SQL injection vulnerability in Esri ArcGIS Insights Desktop for Mac and Windows version 2022.1 that may allow a local, authorized malicious user to execute arbitrary SQL commands against the back-end database. The effort required to generate the crafted input required t...
Esri Arcgis Insights 2022.1
NA
CVE-2023-25838
There is SQL injection vulnerability in Esri ArcGIS Insights 2022.1 for ArcGIS Enterprise and that may allow a remote, authorized malicious user to execute arbitrary SQL commands against the back-end database. The effort required to generate the crafted input required to exploit...
Esri Arcgis Insights 2022.1
NA
CVE-2023-25833
There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.0 and below that may allow a remote, authenticated malicious user to create a crafted link which when clicked could render arbitrary HTML in the victim’s browser (no stateful change made or custo...
Esri Portal For Arcgis
NA
CVE-2023-25831
There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1, 10.8.1 and 10.7.1 which may allow a remote, unauthenticated malicious user to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s brows...
Esri Portal For Arcgis 10.8.1
Esri Portal For Arcgis 10.7.1
Esri Portal For Arcgis 10.9.1
NA
CVE-2023-25832
There is a cross-site-request forgery vulnerability in Esri Portal for ArcGIS Versions 11.0 and below that may allow an malicious user to trick an authorized user into executing unwanted actions.
Esri Portal For Arcgis
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2018-25103
CVE-2024-36279
CVE-2024-38457
elevation of privilege
CVE-2024-27801
CVE-2024-30103
NULL pointer dereference
CVE-2024-6057
XML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »