Skip to content
OpenAdvisories
High WID-SEC-2024-0800 15 CVEs

ESRI Portal for ArcGIS: Mehrere Schwachstellen

Published Apr 4, 2024 · Updated Nov 27, 2024 · Revision 2 · de-DE

Vendor: Esri Product: ArcGIS Platform: Linux Platform: Windows

Summary

Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in ESRI ArcGIS ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder Cross-Site Scripting (XSS)-Angriffe durchzuführen.

Product

ArcGIS ist ein Geoinformationssystem.

Vulnerabilities 15

  • Critical 9.9
    CVE-2024-25693

    Portal for ArcGIS has a directory traversal vulnerability.

    There is a path traversal in Esri Portal for ArcGIS versions <= 11.2. Successful exploitation may allow a remote, authenticated attacker to traverse the file system to access files or execute code outside of the intended directory. 

    Esri Portal for ArcGIS
  • High 8.5
    CVE-2024-25699

    Portal for ArcGIS has an invalid authentication vulnerability

    There is a difficult‑to‑exploit improper authentication issue in the Home application for Esri Portal for ArcGIS versions 11.2 and below on Windows and Linux, and ArcGIS Enterprise versions 11.1 and below on Kubernetes, which under unique circumstances could …

    Esri Portal for ArcGIS
  • High 7.2
    CVE-2024-25695

    concatenated errors resulting in cross site scripting and frame injection issues.

    There is a Cross-site Scripting vulnerability in Portal for ArcGIS in versions 11.2 and below that may allow a remote, authenticated attacker to provide input that is not sanitized properly and is rendered in error messages. The are no privileges required to …

    Esri Portal for ArcGIS
  • Medium 6.1
    CVE-2024-25698

    Reflected XSS in Portal for ArcGIS

    There is a reflected cross site scripting vulnerability in the home application in Esri Portal for ArcGIS 11.1 and below on Windows and Linux that allows a remote, unauthenticated attacker to create a crafted link which when clicked could potentially execute …

    Esri Portal for ArcGIS
  • Medium 6.1
    CVE-2024-25706

    HTMLi at createFolder Content Injection

    There is an HTML injection vulnerability in Esri Portal for ArcGIS 11.0 and below that may allow a remote, unauthenticated attacker to craft a URL which, when clicked, could potentially generate a message that may entice an unsuspecting victim to visit an arb…

    Esri Portal for ArcGIS
  • Medium 6.1
    CVE-2024-25709

    Self-XSS style in move item dialog

    There is a stored Cross‑Site Scripting (XSS) vulnerability in Esri Portal for ArcGIS versions 11.2 and below that may allow a remote, authenticated attacker to create a crafted link that can be saved as a new location when moving an existing item, which could…

    Esri Portal for ArcGIS
  • Medium 5.4
    CVE-2024-25692

    BUG-000154722 - Cross-site request forgery (CSRF) issue in Portal for ArcGIS

    There is a cross-site-request forgery vulnerability in Esri Portal for ArcGIS Versions 11.1 and below that may in some cases allow a remote, unauthenticated attacker to trick an authorized user into executing unwanted actions via a crafted form. The impact to…

    Esri Portal for ArcGIS
  • Medium 5.4
    CVE-2024-25697

    Stored XSS in Portal for ArcGIS

    There is a Cross-site Scripting vulnerability in Portal for ArcGIS in versions 11.1 and below that may allow a remote, authenticated attacker to create a crafted link which when opening an authenticated users bio page will render an image in the victims brows…

    Esri Portal for ArcGIS
  • Medium 5.4
    CVE-2024-25705

    Cross site scripting issue in embed widget

    There is a cross‑site scripting (XSS) vulnerability in Esri Portal for ArcGIS Experience Builder versions 11.1 and below on Windows and Linux that allows a remote, authenticated attacker with low‑privileged access to create a crafted link which, when clicked,…

    Esri Portal for ArcGIS
  • Medium 4.8
    CVE-2024-25696

    Stored XSS in Portal for ArcGIS

    There is a Cross-site Scripting vulnerability in Portal for ArcGIS in versions 11.0 and below that may allow a remote, authenticated attacker to create a crafted link which when accessing the page editor an image will render in the victim’s browser. The privi…

    Esri Portal for ArcGIS
  • Medium 4.8
    CVE-2024-25700

    Persistent XSS in URL added to a shared map

    There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Web App Builder versions 11.1 and below that may allow a remote, authenticated attacker to create a crafted link that is stored in a web map link which when clicked coul…

    Esri ArcGIS Enterprise Builder
  • Medium 4.8
    CVE-2024-25708

    Persistent XSS when creating new application using Web App Builder

    There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Web App Builder versions 10.9.1 and below that may allow a remote, authenticated attacker to create a crafted link which when clicked could potentially execute arbitrary…

    Esri ArcGIS Enterprise Web App Builder
  • Medium 4.7
    CVE-2024-25690

    HTML injection in ArcGIS Web AppBuilder

    There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.1 and below that may allow a remote, unauthenticated attacker to create a crafted link which when clicked could render arbitrary HTML in the victim’s browser.

    Esri ArcGIS Enterprise Web App Builder
  • Unscored —
    CVE-2024-25703 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because this item is scheduled to be patched …

  • Unscored —
    CVE-2024-25704 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because this item is scheduled to be patched …

Revision history

  1. #2

    Produktzuordnung überprüft

  2. #1

    Initiale Fassung

References