CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2022-38200

A cross site scripting vulnerability exists in some map service configurations of ArcGIS Server versions 10.8.1 and 10.7.1. Specifically crafted web requests can execute arbitrary JavaScript in the context of the victim's browser.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 34.4%

CVSS Severity

CVSS v3 Score 6.1

References

https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/arcgis-server-map-service-security-2022-update-1-is-now-available
https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/arcgis-server-map-service-security-2022-update-1-is-now-available

Products affected by CVE-2022-38200

Esri » Arcgis Server » Version: 10.7.1

cpe:2.3:a:esri:arcgis_server:10.7.1
Esri » Arcgis Server » Version: 10.8.1

cpe:2.3:a:esri:arcgis_server:10.8.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-38200

Products

Pricing

Contact Us