CVE-2022-38207
CVSS V2 None
CVSS V3 None
Description
There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.8.1 and 10.7.1 which may allow a remote remote, unauthenticated attacker to create a crafted link which when clicked which could execute arbitrary JavaScript code in the victim’s browser.
Overview
- CVE ID
- CVE-2022-38207
- Assigner
- psirt@esri.com
- Vulnerability Status
- Analyzed
- Published Version
- 2022-12-29T20:15:09
- Last Modified Date
- 2023-01-05T22:13:41
Weakness Enumerations
CPE Configuration (Product)
CPE | Vulnerable | Operator | Version Start | Version End |
---|---|---|---|---|
cpe:2.3:a:esri:portal_for_arcgis:10.7.1:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:esri:portal_for_arcgis:10.8.1:*:*:*:*:*:*:* | 1 | OR |
References
Sources
Source Name | Source URL |
---|---|
NIST | https://nvd.nist.gov/vuln/detail/CVE-2022-38207 |
MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38207 |
History
Created | Old Value | New Value | Data Type | Notes |
---|---|---|---|---|
2022-12-29 21:13:42 | Added to TrackCVE | |||
2022-12-29 21:13:44 | Weakness Enumeration | new | ||
2022-12-29 23:14:44 | 2022-12-29T22:24:55 | CVE Modified Date | updated | |
2022-12-29 23:14:44 | Received | Awaiting Analysis | Vulnerability Status | updated |
2023-01-04 20:15:11 | Awaiting Analysis | Undergoing Analysis | Vulnerability Status | updated |
2023-01-05 22:19:09 | 2023-01-05T22:13:41 | CVE Modified Date | updated | |
2023-01-05 22:19:09 | Undergoing Analysis | Analyzed | Vulnerability Status | updated |
2023-01-05 22:19:11 | CPE Information | updated |