CVE-2022-38210
published 2022-12-29CVE-2022-38210: There is a reflected HTML injection vulnerability in Esri Portal for ArcGIS versions 10.9.1 and below that may allow a remote, unauthenticated attacker to…
PriorityP430medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EPSS
0.49%
38.7th percentile
There is a reflected HTML injection vulnerability in Esri Portal for ArcGIS versions 10.9.1 and below that may allow a remote, unauthenticated attacker to create a crafted link which when clicked could render arbitrary HTML in the victim’s browser.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| esri | arcgis_enterprise | Portal for ArcGIS – 10.9.1 | — |
| esri | portal_for_arcgis | <= 10.9.1 | — |
CVSS provenance
nvdv3.16.1MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-4fgf-f97h-jg4p: There is a reflected HTML injection vulnerability in Esri Portal for ArcGIS versions 10
ghsa_unreviewed·2023-07-06
CVE-2022-38210 [MEDIUM] CWE-79 GHSA-4fgf-f97h-jg4p: There is a reflected HTML injection vulnerability in Esri Portal for ArcGIS versions 10
There is a reflected HTML injection vulnerability in Esri Portal for ArcGIS versions 10.9.1 and below that may allow a remote, unauthenticated attacker to create a crafted link which when clicked could render arbitrary HTML in the victim’s browser.
Red Hat
xmpcore: Uncontrolled Resource Consumption
vendor_redhat·2023-08-10·CVSS 5.5
CVE-2023-38210 [MEDIUM] CWE-400 xmpcore: Uncontrolled Resource Consumption
xmpcore: Uncontrolled Resource Consumption
Adobe XMP Toolkit versions 2022.06 is affected by a Uncontrolled Resource Consumption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
An uncontrolled resource consumption flaw was found in the Adobe XMP Toolkit. This issue may allow an unauthenticated attacker to send a malicious file, which when opened by a user, could lead to an application denial of service.
Package: xmpcore (Red Hat BPM Suite 6) - Out of support scope
Package: xmpcore (Red Hat Fuse 7) - Out of support scope
Package: xmpcore (Red Hat JBoss BRMS 6) - Out of support scope
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-12-29
Published