CVE-2022-38208
29.12.2022, 20:15
There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 11 and below that may allow a remote, unauthenticated attacker to craft a URL that could redirect a victim to an arbitrary website, simplifying phishing attacks.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| esri | portal_for_arcgis | 𝑥 ≤ 11.0 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| esri | arcgis | 𝑥 ≤ 11.0 | CNA |
Common Weakness Enumeration