CVE-2021-29109: A reflected XSS vulnerability in Esri Portal for ArcGIS version 10.9.
Published Oct 1, 2021
·Updated
A reflected XSS vulnerability in Esri Portal for ArcGIS version 10.9 and below may allow a remote attacker able to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the user’s browser.
Affected Software
1 affected component
Esri Portal for ArcGIS<=10.9
Remediation
Event History
Oct 1, 2021
CVE Published
via MITRE·02:51 PM
Data Sourced
via MITRE·02:51 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-29109?
The severity of CVE-2021-29109 is medium with a severity value of 6.1.
2
How does CVE-2021-29109 impact Esri Portal for ArcGIS?
CVE-2021-29109 is a reflected XSS vulnerability that may allow a remote attacker to execute arbitrary JavaScript code in the user's browser if they can convince the user to click on a crafted link.
3
Which versions of Esri Portal for ArcGIS are affected by CVE-2021-29109?
Esri Portal for ArcGIS version 10.9 and below are affected by CVE-2021-29109.
4
How can I fix CVE-2021-29109 in Esri Portal for ArcGIS?
To fix CVE-2021-29109 in Esri Portal for ArcGIS, you should apply the security update provided by Esri, specifically the Portal for ArcGIS 2021 Update 1 Patch.