Esri

Arcgis Enterprise

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.8

CVE-2024-25708

  • EPSS 0.2%
  • Veröffentlicht 04.04.2024 18:15:13
  • Zuletzt bearbeitet 10.04.2025 19:15:58

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Web App Builder versions 10.9.1 and below that may allow a remote, authenticated attacker to create a crafted link which when clicked could potentially execute ...

8.5

CVE-2024-25699

  • EPSS 1.62%
  • Veröffentlicht 04.04.2024 18:15:11
  • Zuletzt bearbeitet 13.02.2026 19:41:30

There is a difficult‑to‑exploit improper authentication issue in the Home application for Esri Portal for ArcGIS versions 11.2 and below on Windows and Linux, and ArcGIS Enterprise versions 11.1 and below on Kubernetes, which under unique circumstanc...

5.3

CVE-2021-29115

  • EPSS 1.29%
  • Veröffentlicht 07.12.2021 11:15:07
  • Zuletzt bearbeitet 21.11.2024 06:00:44

An information disclosure vulnerability in the ArcGIS Service Directory in Esri ArcGIS Enterprise versions 10.9.0 and below may allows a remote attacker to view hidden field names in feature layers. This issue may reveal field names, but not not disc...

5.4

CVE-2021-3012

Exploit
  • EPSS 0.14%
  • Veröffentlicht 08.04.2021 11:15:12
  • Zuletzt bearbeitet 21.11.2024 06:20:44

A cross-site scripting (XSS) vulnerability in the Document Link of documents in ESRI Enterprise before 10.9 allows remote authenticated users to inject arbitrary JavaScript code via a malicious HTML attribute such as onerror (in the URL field of the ...

5.4

CVE-2019-16193

  • EPSS 0.19%
  • Veröffentlicht 11.09.2019 12:15:12
  • Zuletzt bearbeitet 21.11.2024 04:30:14

In ArcGIS Enterprise 10.6.1, a crafted IFRAME element can be used to trigger a Cross Frame Scripting (XFS) attack through the EDIT MY PROFILE feature.