← Database

CVE-2022-38184

HIGH CVSS: 7.5 Published: 2022-08-16 Modified: 2026-06-17

Description

There is an improper access control vulnerability in Portal for ArcGIS versions 10.8.1 and below which could allow a remote, unauthenticated attacker to access an API that may induce Esri Portal for ArcGIS to read arbitrary URLs.

Affected Platforms

Esri Portal For Arcgis

Weakness Type

CWE-284, NVD-CWE-Other

References