Vulnerability CVE-2022-38198


Published: 2022-10-25

Description:
There is a reflected cross site scripting issue in the Esri ArcGIS Server services directory versions 10.9.1 and below that may allow a remote, unauthenticated attacker to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the victim??s browser.

 References:
https://www.esri.com/arcgis-blog/products/administration/administration/arcgis-server-security-2022-update-1-patch

Copyright 2026, cxsecurity.com

 

Back to Top