Approved changes feed: RSS · Atom

cpe:2.3:a:esri:arcgis__quickcapture:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEsri (7fc7b1c4-e95b-5bc9-bfb4-4695cd2e3e82)
ProductArcgis Quickcapture (0ab16b33-f602-55fb-ab80-ac786ec235d7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-38209 vulnerable 2026-06-03 14:47:49.454033 Reflected XSS vulnerability in Portal for ArcGIS
MEDIUM (6.1)
There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1 and below which may allow a remote, unauthenticated attacker to create a crafted link which when clicked could execute arbitrary JavaScript code in the victim’s browser.
Published: 2022-12-30T05:13:00.217Z
Updated: 2025-04-10T14:53:41.363Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38201 vulnerable 2026-06-03 14:47:49.448610 An unvalidated redirect vulnerability exists in Esri ArcGIS Quick Capture Web Designer versions 10.8.1 to 10.9.1.
MEDIUM (6.1)
An unvalidated redirect vulnerability exists in Esri Portal for ArcGIS Quick Capture Web Designer versions 10.8.1 to 10.9.1. A remote, unauthenticated attacker can potentially induce an unsuspecting authenticated user to access an an attacker controlled domain.
Published: 2022-11-15T00:00:00.000Z
Updated: 2025-04-10T14:55:25.138Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.