Security Advisory

CVE-2022-38186

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-08-15 20:45:12
Last updated 2025-04-10 14:58:11
Assigner Esri
State PUBLISHED

Description

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.8.1 and below which may allow a remote attacker able to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the victim’s browser.