VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 16, 2022· Updated Apr 10, 2025

Code injection issue in Portal for ArcGIS (10.7.1 and 10.8.1)

CVE-2022-38193

Description

There is a code injection vulnerability in Esri Portal for ArcGIS versions 10.8.1 and below that may allow a remote, unauthenticated attacker to pass strings which could potentially cause arbitrary code execution.

Affected products

2
  • Esri/Portal For Arcgisllm-fuzzy2 versions
    <=10.8.1+ 1 more
    • (no CPE)range: <=10.8.1
    • (no CPE)range: 10.7.1 10.8.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.