CVE-2013-7231

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2013-7231
Cross-site scripting (XSS) vulnerability in the Mobile Content Server in ESRI ArcGIS for Server 10.1 and 10.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-5222.

3.5 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability : 6.8 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://support.esri.com/en/downloads/patches-servicepacks/view/productid/66/metaid/2009 Vendor Advisory
http://support.esri.com/en/knowledgebase/techarticles/detail/41468 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:esri:arcgis_server:10.1:*:*:*:*:*:*:*
cpe:2.3:a:esri:arcgis_server:10.2:*:*:*:*:*:*:*
History

11 Jul 2024, 18:07

Type Values Removed Values Added
First Time Esri arcgis Server
CPE cpe:2.3:a:esri:arcgis:10.1:*:*:*:*:*:*:*
cpe:2.3:a:esri:arcgis:10.2:*:*:*:*:*:*:*		 cpe:2.3:a:esri:arcgis_server:10.2:*:*:*:*:*:*:*
cpe:2.3:a:esri:arcgis_server:10.1:*:*:*:*:*:*:*
References () http://support.esri.com/en/downloads/patches-servicepacks/view/productid/66/metaid/2009 - () http://support.esri.com/en/downloads/patches-servicepacks/view/productid/66/metaid/2009 - Vendor Advisory
References () http://support.esri.com/en/knowledgebase/techarticles/detail/41468 - () http://support.esri.com/en/knowledgebase/techarticles/detail/41468 - Vendor Advisory
Information

Published : 2013-12-30 04:53

Updated : 2024-07-11 18:07

NVD link : CVE-2013-7231

Mitre link : CVE-2013-7231

CVE.ORG link : CVE-2013-7231

JSON object : View

Products Affected

esri

  • arcgis_server
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')