VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 22, 2014· Updated Jun 17, 2026

CVE-2014-5122

CVE-2014-5122

Description

Open redirect vulnerability in ESRI ArcGIS for Server 10.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter, related to login.

Affected products

2
  • Esri/Arcgis Server2 versions
    cpe:2.3:a:esri:arcgis_server:10.1.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:esri:arcgis_server:10.1.1:*:*:*:*:*:*:*
    • (no CPE)range: =10.1.1

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.