← Database

CVE-2022-38210

MEDIUM CVSS: 6.1 Published: 2022-12-29 Modified: 2026-06-17

Description

There is a reflected HTML injection vulnerability in Esri Portal for ArcGIS versions 10.9.1 and below that may allow a remote, unauthenticated attacker to create a crafted link which when clicked could render arbitrary HTML in the victim’s browser.

Affected Platforms

Esri Portal For Arcgis

Weakness Type

CWE-80, CWE-79

References