Summary
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in ESRI ArcGIS ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.
Product
ArcGIS ist ein Geoinformationssystem.
Vulnerabilities 2
-
Medium 6.1
BUG-000158075 Stored XSS issue in ArcGIS Server
There is a stored Cross-site Scripting vulnerability in Esri ArcGIS Server versions 11.0 and below on Windows and Linux platforms that may allow a remote, unauthenticated attacker to create crafted content which when clicked could potentially execute arbitrar…
-
Low 3.4
BUG-000154070 Stored XSS issue in the ArcGIS REST Services directory
There is a Cross-site Scripting vulnerability in ArcGIS Server in versions 11.1 and below that may allow a remote, authenticated attacker to create a crafted link which onmouseover wont execute but could potentially render an image in the victims browser. Th…
Revision history
-
#1
Initiale Fassung
References
-
ESRI Security Advisory vom 2023-07-23
https://www.esri.com/arcgis-blog/products/trust-arcgis/announcements/arcgis-server-security-2023-update-1-patch-available/