Skip to content
OpenAdvisories

Archive

15 August 2022

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.1

    HTML injection vulnerability in Portal for ArcGIS

    There is an HTML injection issue in Esri Portal for ArcGIS versions 10.9.0 and below which may allow a remote, authenticated attacker to inject HTML into some locations in the home application.

  • Medium 6.1

    Stored cross-site scripting vulnerability in Esri Portal for ArcGIS Configurable Apps

    A stored Cross Site Scripting (XSS) vulnerability in Esri Portal for ArcGIS configurable apps may allow a remote, unauthenticated attacker to pass and store malicious strings via crafted queries which when accessed could potentially execute arbitrary JavaScri…