Esri - CVE CyberSecurity Database News

CVE-2022-38200 - Exposing a Cross-Site Scripting Vulnerability in ArcGIS Server Map Services for Versions 10.8.1 and 10.7.1

Oct 25, 2022 XSS Esri ArcGIS Server

CVE-2022-38200 - Exposing a Cross-Site Scripting Vulnerability in ArcGIS Server Map Services for Versions 10.8.1 and 10.7.1

Security researchers have discovered a new vulnerability, assigned the name CVE-2022-38200, in the ArcGIS Server software. This vulnerability affects map services running on specific server

CVE-2022-38195: Reflected Cross Site Scripting (XSS) Vulnerability in Esri ArcGIS Server - Risks, Exploits, and Mitigation

Oct 25, 2022 CSRF XSS Exploit Esri ArcGIS Server

CVE-2022-38195: Reflected Cross Site Scripting (XSS) Vulnerability in Esri ArcGIS Server - Risks, Exploits, and Mitigation

A recent security advisory has been published today about a vulnerability (CVE-2022-38195) discovered in Esri ArcGIS Server, affecting versions 10.9.1 and below. This

Oct 25, 2022 Exploit Esri ArcGIS Server

CVE-2022-38199: Uncovering a Remote File Download Vulnerability in Esri ArcGIS Server Web Services

The Esri ArcGIS Server is a popular geographic information system (GIS) platform, which provides web services for mapping and geospatial analysis. A recently discovered vulnerability,

Oct 25, 2022 XSS Exploit Esri ArcGIS Server

CVE-2022-38198: Reflected Cross Site Scripting (XSS) Vulnerability in Esri ArcGIS Server Services Directory

CVE-2022-38198 is a security vulnerability that has been identified in the Esri ArcGIS Server services directory for versions 10.9.1 and below. A remote,

Oct 25, 2022 Exploit Esri ArcGIS Server

CVE-2022-38197 - Unvalidated Redirect in Esri ArcGIS Server: New Threats, Exploits, and What You Need to Know

CVE-2022-38197, a security vulnerability has been identified in Esri's ArcGIS Server that opens doors for potential phishing attacks initiated by remote, unauthenticated attackers.