CVE-2022-38192 in Portal for ArcGIS

Resumen

por MITRE • 2022-08-16

A stored Cross Site Scripting (XSS) vulnerability in Esri Portal for ArcGIS may allow a remote, authenticated attacker to pass and store malicious strings via crafted queries which when accessed could potentially execute arbitrary JavaScript code in the user’s browser.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsable: Environmental Systems Research Institute, Inc.
• Reservar: 2022-08-12
• Divulgación: 2022-08-16
• Moderación: aceptado
• Artículo: VDB-206499
• CPE: listo
• CWE: CWE-79 (confirmado)
• CVSS: 5.4 (NVD)
• EPSS: 0.00547
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-38192
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-38192
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-38192/