Vulnerability Database

318,756

Total vulnerabilities in the database

CVE-2022-38200

A cross site scripting vulnerability exists in some map service configurations of ArcGIS Server versions 10.8.1 and 10.7.1. Specifically crafted web requests can execute arbitrary JavaScript in the context of the victim's browser.

  • Published: Oct 25, 2022
  • Updated: Nov 16, 2025
  • CVE: CVE-2022-38200
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.1
  • AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
esri / arcgis_server 10.8.1 10.8.1.x
esri / arcgis_server 10.7.1 10.7.1.x