| Package | Affected versions | Patched versions |
|---|---|---|
| arcgis server | = 10.8.1= 10.9.0 |
A stored Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server feature services versions 10.8.1 and 10.9 (only) feature services may allow a remote, unauthenticated attacker to pass and store malicious strings via crafted queries which when accessed could potentially execute arbitrary JavaScript code in the user’s browser.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free