Vulnerability Database

299,038

Total vulnerabilities in the database

CVE-2022-38200

A cross site scripting vulnerability exists in some map service configurations of ArcGIS Server versions 10.8.1 and 10.7.1. Specifically crafted web requests can execute arbitrary JavaScript in the context of the victim's browser.

  • Published: Oct 25, 2022
  • Updated: Apr 14, 2023
  • CVE: CVE-2022-38200
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.1
  • AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
esri / arcgis_server 10.8.1 10.8.1.x
esri / arcgis_server 10.7.1 10.7.1.x