ESRI ArcGIS Online up to 10.8 onerror cross site scripting

entryeditHistoryDiffjsonxmlCTI

A vulnerability was found in ESRI ArcGIS Online up to 10.8. It has been classified as problematic. This affects an unknown code block of the component onerror Handler. Upgrading to version 10.9 eliminates this vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
11120644	04/08/2021	VulD...	price_0day	$0-$5k	see documentation	04/08/2021	accepted	90
11120643	04/08/2021	VulD...	cvss3_meta_tempscore	3.5	see documentation	04/08/2021	accepted	90
11120642	04/08/2021	VulD...	cvss3_meta_basescore	3.5	see documentation	04/08/2021	accepted	90
11120641	04/08/2021	VulD...	cvss3_vuldb_tempscore	3.5		04/08/2021	accepted	90
11120640	04/08/2021	VulD...	cvss3_vuldb_basescore	3.5		04/08/2021	accepted	90
11120639	04/08/2021	VulD...	cvss2_vuldb_tempscore	4.0		04/08/2021	accepted	90
11120638	04/08/2021	VulD...	cvss2_vuldb_basescore	4.0		04/08/2021	accepted	90
11120637	04/08/2021	VulD...	cvss3_vuldb_e	X	derived from historical data	04/08/2021	accepted	80
11120636	04/08/2021	VulD...	cvss2_vuldb_e	ND	derived from historical data	04/08/2021	accepted	80
11120635	04/08/2021	VulD...	cvss2_vuldb_au	S	derived from historical data	04/08/2021	accepted	80
11120634	04/08/2021	VulD...	cvss2_vuldb_rl	OF	derived from vuldb v3 vector	04/08/2021	accepted	80
11120633	04/08/2021	VulD...	cvss2_vuldb_rc	C	derived from vuldb v3 vector	04/08/2021	accepted	80
11120632	04/08/2021	VulD...	cvss2_vuldb_ai	N	derived from vuldb v3 vector	04/08/2021	accepted	80
11120631	04/08/2021	VulD...	cvss2_vuldb_ii	P	derived from vuldb v3 vector	04/08/2021	accepted	80
11120630	04/08/2021	VulD...	cvss2_vuldb_ci	N	derived from vuldb v3 vector	04/08/2021	accepted	80
11120629	04/08/2021	VulD...	cvss2_vuldb_ac	L	derived from vuldb v3 vector	04/08/2021	accepted	80
11120628	04/08/2021	VulD...	cvss2_vuldb_av	N	derived from vuldb v3 vector	04/08/2021	accepted	80
11120627	04/08/2021	VulD...	date	1617832800 (04/08/2021)		04/08/2021	accepted	90
11120626	04/08/2021	VulD...	cve	CVE-2021-3012	mitre.org	04/08/2021	accepted	90
11120625	04/08/2021	VulD...	upgrade_version	10.9		04/08/2021	accepted	90