Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

ArcGIS Enterprise — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in ArcGIS Enterprise, with AI-generated Chinese analysis, references, and POCs.

Vendor: Esri

CVE IDTitleCVSSSeverityPaused
CVE-2022-38204 Reflected XSS vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only) CWE-79 6.1 Medium2022-12-30
CVE-2022-38205 Portal for ArcGIS has a directory traversal vulnerability (10.9.1, 10.8.1 and 10.7.1 only) CWE-23 8.6 High2022-12-30
CVE-2022-38206 Reflected XSS vulnerability in Portal for ArcGIS (10.9.1, 10.8.1 and 10.7.1 only) CWE-79 6.1 Medium2022-12-30
CVE-2022-38207 Reflected XSS vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only) CWE-79 6.1 Medium2022-12-30
CVE-2022-38208 Unvalidated redirect in Portal for ArcGIS CWE-601 6.1 Medium2022-12-30
CVE-2022-38210 HTML injection in accountswitcher-callback.html (10.9.1, 10.8.1 and 10.7.1 only) CWE-80 6.1 Medium2022-12-30
CVE-2022-38211 Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS (10.9.1, 10.8.1 and 10.7.1 only) CWE-918 7.5 High2022-12-30
CVE-2022-38212 Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only) CWE-918 7.5 High2022-12-30

All 8 known CVE vulnerabilities affecting ArcGIS Enterprise with full Chinese analysis, references, and POCs where available.