CVE-2014-5122

Published: Aug 22, 2014Modified: May 6, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Open redirect vulnerability in ESRI ArcGIS for Server 10.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter, related to login.

Affected (1)

Products: Esri: Arcgis Server

Esri

1 product

Arcgis Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Esri Arcgis Server	Version 10.1.1

References (8)

http://packetstormsecurity.com/files/127959/ArcGIS-For-Server-10.1.1-XSS-Open-Redirect.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/533189/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/69341

Source: cve@mitre.org

http://www.securitytracker.com/id/1030752

Source: cve@mitre.org

http://packetstormsecurity.com/files/127959/ArcGIS-For-Server-10.1.1-XSS-Open-Redirect.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/533189/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/69341

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1030752

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.