Esri ArcGIS Enterprise

• CVE-2022-38207 Medium 6.1 Reflected XSS vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only) 0.5%
• CVE-2022-38208 Medium 6.1 Unvalidated redirect in Portal for ArcGIS 0.5%
• CVE-2022-38206 Medium 6.1 Reflected XSS vulnerability in Portal for ArcGIS (10.9.1, 10.8.1 and 10.7.1 only) 0.5%
• CVE-2022-38204 Medium 6.1 Reflected XSS vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only) 0.5%
• CVE-2022-38212 High 7.5 Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only) 0.8%
• CVE-2022-38211 High 7.5 Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS (10.9.1, 10.8.1 and 10.7.1 only) 0.9%
• CVE-2022-38210 Medium 6.1 HTML injection in accountswitcher-callback.html (10.9.1, 10.8.1 and 10.7.1 only) 0.5%
• CVE-2022-38205 High 8.6 Portal for ArcGIS has a directory traversal vulnerability (10.9.1, 10.8.1 and 10.7.1 only) 1.6%