https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 16:11:07 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-05538 cnvd-2022-05538 https://cve.radiocsirt.org/vuln/cnvd-2022-05538 https://cve.radiocsirt.org/vuln/euvd-2026-228359 EUVD-2026-228359 https://cve.radiocsirt.org/vuln/euvd-2026-228359 https://cve.radiocsirt.org/vuln/fkie_cve-2021-29108 <p>There is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below that may allow a remote, authenticated attacker who is able to intercept and modify a SAML assertion to impersonate another account (XML Signature Wrapping Attack). In addition patching, Esri also strongly recommends as best practice for SAML assertions to be signed and encrypted.</p> <p>There is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below that may allow a remote, authenticated attacker who is able to intercept and modify a SAML assertion to impersonate another account (XML Signature Wrapping Attack). In addition patching, Esri also strongly recommends as best practice for SAML assertions to be signed and encrypted.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-29108 https://cve.radiocsirt.org/vuln/ghsa-249c-5cfq-cwqh <p>There is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below that may allow a remote, authenticated attacker to impersonate another account.</p> <p>There is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below that may allow a remote, authenticated attacker to impersonate another account.</p> https://cve.radiocsirt.org/vuln/ghsa-249c-5cfq-cwqh https://cve.radiocsirt.org/vuln/gsd-2021-29108 gsd-2021-29108 https://cve.radiocsirt.org/vuln/gsd-2021-29108