CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2022-38187

Prior to version 10.9.0, the sharing/rest/content/features/analyze endpoint is always accessible to anonymous users, which could allow an unauthenticated attacker to induce Esri Portal for ArcGIS to read arbitrary URLs.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 54.6%

CVSS Severity

CVSS v3 Score 7.5

References

https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/portal-for-arcgis-security-2022-update-1-patch/
https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/portal-for-arcgis-security-2022-update-1-patch/

Products affected by CVE-2022-38187

Esri » Portal For Arcgis » Version: N/A

cpe:2.3:a:esri:portal_for_arcgis:-
Esri » Portal For Arcgis » Version: 10.6

cpe:2.3:a:esri:portal_for_arcgis:10.6
Esri » Portal For Arcgis » Version: 10.6.1

cpe:2.3:a:esri:portal_for_arcgis:10.6.1
Esri » Portal For Arcgis » Version: 10.7.1

cpe:2.3:a:esri:portal_for_arcgis:10.7.1
Esri » Portal For Arcgis » Version: 10.8

cpe:2.3:a:esri:portal_for_arcgis:10.8
Esri » Portal For Arcgis » Version: 10.8.1

cpe:2.3:a:esri:portal_for_arcgis:10.8.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-38187

Products

Pricing

Contact Us