CVEvulnerability
CVE-2014-5122
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-08-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
Description
Open redirect vulnerability in ESRI ArcGIS for Server 10.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter, related to login.
Affected configurations
• esri arcgis server 10.1.1
References
- http://packetstormsecurity.com/files/127959/ArcGIS-For-Server-10.1.1-XSS-Open-Redirect.html packetstormsecurity.com
- http://www.securityfocus.com/archive/1/533189/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/69341 www.securityfocus.com
- http://www.securitytracker.com/id/1030752 www.securitytracker.com
- http://packetstormsecurity.com/files/127959/ArcGIS-For-Server-10.1.1-XSS-Open-Redirect.html packetstormsecurity.com
- http://www.securityfocus.com/archive/1/533189/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/69341 www.securityfocus.com
- http://www.securitytracker.com/id/1030752 www.securitytracker.com