CVEvulnerability
CVE-2014-9741
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-07-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in ESRI ArcGIS for Desktop, ArcGIS for Engine, and ArcGIS for Server 10.2.2 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• esri arcgis for desktop (<= 10.2.2)
• esri arcgis for engine (<= 10.2.2)
• esri arcgis server (<= 10.2.2)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://blogs.esri.com/esri/arcgis/2014/09/04/arcgis-for-server-security-patch-10-1-sp1-qip-10-2-1-10-2-2/ Patch, Vendor Advisory
- http://support.esri.com/en/downloads/patches-servicepacks/view/productid/67/metaid/2223 Patch, Vendor Advisory
- http://www.securitytracker.com/id/1032733 www.securitytracker.com
- http://blogs.esri.com/esri/arcgis/2014/09/04/arcgis-for-server-security-patch-10-1-sp1-qip-10-2-1-10-2-2/ Patch, Vendor Advisory
- http://support.esri.com/en/downloads/patches-servicepacks/view/productid/67/metaid/2223 Patch, Vendor Advisory
- http://www.securitytracker.com/id/1032733 www.securitytracker.com