| Package | Affected versions | Patched versions |
|---|---|---|
| portal for arcgis | ≤ 11.0 |
There is an HTML injection vulnerability in Esri Portal for ArcGIS 11.0 and below that may allow a remote, unauthenticated attacker to craft a URL which, when clicked, could potentially generate a message that may entice an unsuspecting victim to visit an arbitrary website. This could simplify phishing attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free