Description
A remote file inclusion vulnerability in the ArcGIS Server help documentation may allow a remote, unauthenticated attacker to inject attacker supplied html into a page.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Esri | ArcGIS Server | 10.9 – ≤ 10.9.0 | — |