laptop and a wrench

Bug

A Cross-site scripting (XSS) vulnerability is reflected in Portal for ArcGIS.

Last Published: October 19, 2021 Portal for ArcGIS
Bug ID Number BUG-000136544
SubmittedJanuary 5, 2021
Last ModifiedFebruary 15, 2023
Applies toPortal for ArcGIS
Version found10.8
Operating SystemRed Hat Enterprise Linux
Operating System Version7.7
Version Fixed10.9
StatusFixed

Workaround

The Portal for ArcGIS Security 2022 Update 1 Patch is now live on the support site. The URL is: https://support.esri.com/en/download/7948. This is a 3 version patch for 10.7.1, 10.8.1 and 10.9.1. Refer to the Issues Addressed section of the patch download page for details on which versions were affected and resolved for this defect.

Steps to Reproduce

Bug ID: BUG-000136544

Software:

  • Portal for ArcGIS

Get help from ArcGIS experts

Contact technical support

Download the Esri Support App

Go to download options

Discover more on this topic