Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2022-38197

BUG-000148347 Unvalidated redirect issues in ArcGIS Server.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Esri

Description

Esri ArcGIS Server versions 10.9.1 and below have an unvalidated redirect issue that may allow a remote, unauthenticated attacker to phish a user into accessing an attacker controlled website via a crafted query parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Esri ArcGIS Server

  • All to ≤ 10.9.1affected

References