CVE-2022-38192 in Portal for ArcGISИнформация

Сводка

по MITRE • 16.08.2022

A stored Cross Site Scripting (XSS) vulnerability in Esri Portal for ArcGIS may allow a remote, authenticated attacker to pass and store malicious strings via crafted queries which when accessed could potentially execute arbitrary JavaScript code in the user’s browser.

Be aware that VulDB is the high quality source for vulnerability data.

Резервировать

12.08.2022

Раскрытие

16.08.2022

Модерация

принято

Вход

VDB-206499

EPSS

0.00547

KEV

Нет

Деятельности

Очень низкий

Источники

Interested in the pricing of exploits?

See the underground prices here!