CVE-2013-7231

Cross-site scripting (XSS) vulnerability in the Mobile Content Server in ESRI ArcGIS for Server 10.1 and 10.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-5222.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:esri:arcgis_server:10.1:*:*:*:*:*:*:*
cpe:2.3:a:esri:arcgis_server:10.2:*:*:*:*:*:*:*

History

21 Nov 2024, 02:00

Type Values Removed Values Added
References () http://support.esri.com/en/downloads/patches-servicepacks/view/productid/66/metaid/2009 - Vendor Advisory () http://support.esri.com/en/downloads/patches-servicepacks/view/productid/66/metaid/2009 - Vendor Advisory
References () http://support.esri.com/en/knowledgebase/techarticles/detail/41468 - Vendor Advisory () http://support.esri.com/en/knowledgebase/techarticles/detail/41468 - Vendor Advisory

11 Jul 2024, 18:07

Type Values Removed Values Added
First Time Esri arcgis Server
References () http://support.esri.com/en/downloads/patches-servicepacks/view/productid/66/metaid/2009 - () http://support.esri.com/en/downloads/patches-servicepacks/view/productid/66/metaid/2009 - Vendor Advisory
References () http://support.esri.com/en/knowledgebase/techarticles/detail/41468 - () http://support.esri.com/en/knowledgebase/techarticles/detail/41468 - Vendor Advisory
CPE cpe:2.3:a:esri:arcgis:10.1:*:*:*:*:*:*:*
cpe:2.3:a:esri:arcgis:10.2:*:*:*:*:*:*:*
cpe:2.3:a:esri:arcgis_server:10.1:*:*:*:*:*:*:*
cpe:2.3:a:esri:arcgis_server:10.2:*:*:*:*:*:*:*

Information

Published : 2013-12-30 04:53

Updated : 2024-11-21 02:00


NVD link : CVE-2013-7231

Mitre link : CVE-2013-7231

CVE.ORG link : CVE-2013-7231


JSON object : View

Products Affected

esri

  • arcgis_server
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')