CVE-2021-29104: There is a stored Cross Site Scripting (XXS) vulnerability in ArcGIS Server Manager version 10.8.1 and below.
A stored Cross Site Scripting (XXS) vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote unauthenticated attacker to pass and store malicious strings in the ArcGIS Server Manager application.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2021-29104.
What is the severity level of CVE-2021-29104?
The severity level of CVE-2021-29104 is medium.
How does CVE-2021-29104 affect ArcGIS Server Manager?
CVE-2021-29104 allows a remote unauthenticated attacker to pass and store malicious strings in ArcGIS Server Manager application.
Which version of ArcGIS Server Manager is affected by CVE-2021-29104?
ArcGIS Server Manager version 10.8.1 and below are affected by CVE-2021-29104.
Is there a patch available for CVE-2021-29104?
Yes, a patch is available for CVE-2021-29104. More information can be found at the following reference: [link](https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/arcgis-server-security-2021-update-1-patch/)