CVE:CVE-2014-9741
CNNVD:CNNVD-201507-199
ESRI ArcGIS是美国环境系统研究所（ESRI）公司的一套基于SOA架构的地理信息系统（GIS），它可以跨企业或跨互联网以服务形式共享二维和三维地图、地址定位器、空间数据库和地理处理工具等GIS资源。ESRI ArcGIS for Desktop、Engine和Server分别是桌面版、引擎版和服务器版。
多款ESRI产品中存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意Web脚本或HTML。以下产品及版本受到影响：ESRI ArcGIS for Desktop 10.2.2及之前版本，ArcGIS for Engine 10.2.2及之前版本，ArcGIS for Server 10.2.2及之前版本。
solution:Upgrade esri arcgis_for_desktop to a higher version than 10.2.2,and avoid the version (,10.2.2]; Upgrade esri arcgis_for_engine to a higher version than 10.2.2,and avoid the version (,10.2.2]; Upgrade esri arcgis_for_server to a higher version than 10.2.2,and avoid the version (,10.2.2]