Skip to contentEsri vulnerabilities
Newest
- esri portal for arcgisStored cross-site scripting vulnerability in Esri Portal for ArcGIS Configurable AppsCVE-2022-381906.1 Medium
- esri portal for arcgisThere is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.8.1 and below which...CVE-2022-381867.1 High
- esri arcreaderarcreader use-after-freeCVE-2021-291177.8 High
- esri arcreaderEsri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityCVE-2021-291123.3 Low
- esri arcreaderEsri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityCVE-2021-291183.3 Low
- esri arcgis serverBUG-000142180 Hosted feature services vulnerable to stored XSSCVE-2021-291166.1 Medium
- esri arcgis enterprise, arcgis server +1 moreAn information disclosure vulnerabilityCVE-2021-291155.3 Medium
- esri arcgis serverSQL injection vulnerability in ArcGIS ServerCVE-2021-291147.3 High
- esri arcgis serverRemote file inclusion vulnerability in ArcGIS Server help documentationCVE-2021-291134.7 Medium
- esri portal for arcgisStored cross-site scripting (XSS) issue in Esri Portal for ArcGIS may allow a remote unauthenticated attacker to pass and store malicious strings in the home application.CVE-2021-291105.4 Medium
- esri portal for arcgisA reflected XSS vulnerability in Esri Portal for ArcGIS version 10.9.CVE-2021-291096.1 Medium
- esri portal for arcgisThere is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below.CVE-2021-291088.8 High
- esri arcgis serverThere is a stored Cross Site Scripting (XXS) vulnerability in ArcGIS Server Manager version 10.8.1 and below.CVE-2021-291046.1 Medium
- esri arcgis serverThere is a Server-Side Request Forgery (SSRF) vulnerability in Esri ArcGIS Server Manager version 10.8.1 and below.CVE-2021-291029.1 Critical
- esri arcgis serverThere is a reflected Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server version 10.8.1 and below.CVE-2021-291036.1 Medium
- esri arcgis serverThere is a stored Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server Services Directory version 10.8.1 and below.CVE-2021-291055.4 Medium
- esri arcgis serverThere is a reflected Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server version 10.8.1 and below.CVE-2021-291064.7 Medium
- esri arcgis serverThere is a stored Cross Site Scripting (XXS) vulnerability in ArcGIS Server Manager version 10.8.1 and below.CVE-2021-291076.1 Medium
- esri arcgis serverThere is a SQL injection vulnerability in ArcGIS ServerCVE-2021-290995.3 Medium
- esri arcgis geoevent serverArcGIS GeoEvent Server has a Directory Traversal security vulnerability.CVE-2021-291018.6 High
- esri arcgis earthArcGIS Earth has a File Parsing Directory Traversal VulnerabilityCVE-2021-291007.8 High
- esri arcgis enterpriseA cross-site scripting (XSS) vulnerability in the Document Link of documents in ESRI ArcGIS...CVE-2021-30125.4 Medium
- esri arcgis desktop, arcgis engine, arcgis pro +3 more +5 moreArcGIS general raster security update: uninitialized pointerCVE-2021-290987.8 High
- esri arcgis desktop, arcgis engine, arcgis pro +3 more +5 moreArcGIS general raster security update: buffer overflowCVE-2021-290977.8 High
- esri arcgis serverArcGIS Server image service and raster analytics security update: uninitialized pointerCVE-2021-290956.4 Medium
- esri arcgis serverArcGIS Server image service and raster analytics security update: buffer overflowCVE-2021-290946.4 Medium
- esri arcgis serverArcGIS Server image service and raster analytics security update: use-after-freeCVE-2021-290936.4 Medium
- esri arcgis desktop, arcgis engine, arcgis pro +4 more +6 moreArcGIS general raster security update: use-after-freeCVE-2021-290967.8 High
- esri arcgis serverEsri ArcGIS Server before 10.8 is vulnerable to SSRF in some configurations.CVE-2020-357129.8 Critical
- esri arcgis enterpriseIn ArcGIS Enterprise 10.6.1, a crafted IFRAME element can be used to trigger a Cross Frame...CVE-2019-161935.4 Medium
- esri arcgisruntime sdkThe ESRI ArcGis Runtime SDK before 10.2.6-2 for Android might allow attackers to execute...CVE-2015-20029.8 Critical
- esri arcgis for desktop, arcgis for engine, arcgis server +2 moreMultiple cross-site scripting (XSS) vulnerabilities in ESRI ArcGIS for Desktop, ArcGIS for Engine...CVE-2014-97414.3 Medium
- esri arcgis serverOpen redirect vulnerability in ESRI ArcGIS for Server 10.1.1 allows remote attackers to redirect...CVE-2014-51225.8 Medium
- esri arcgis serverMultiple cross-site scripting (XSS) vulnerabilities in ESRI ArcGIS for Server 10.1.1 allow remote...CVE-2014-51214.3 Medium
- esri arcgis serverSQL injection vulnerability in ESRI ArcGIS for Server through 10.2 allows remote attackers to...CVE-2013-72327.5 High
- esri arcgis serverCross-site scripting (XSS) vulnerability in the Mobile Content Server in ESRI ArcGIS for Server...CVE-2013-72313.5 Low
- esri arcgis serverMultiple cross-site scripting (XSS) vulnerabilities in ESRI ArcGIS for Server 10.1 allow remote...CVE-2013-52223.5 Low
- esri arcgis serverThe mobile-upload feature in Esri ArcGIS for Server 10.1 through 10.2 allows remote authenticated...CVE-2013-52213.5 Low
- esri arcgis serverSQL injection vulnerability in ESRI ArcGIS 10.1 allows remote authenticated users to execute...CVE-2012-4949Public exploit6.5 Medium
- esri arcmapESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing...CVE-2012-1661Public exploitEPSS 23.8%9.3 High
- esri arcsdeStack-based buffer overflow in the giomgr process in ESRI ArcSDE service 9.2, as used with ArcGIS...CVE-2007-42787.5 High
- esri arcsdeBuffer overflow in the ArcSDE service (giomgr) in Environmental Systems Research Institute (ESRI)...CVE-2007-1770Public exploitEPSS 17.0%10.0 High
- esri arcpadBuffer overflow in ESRI ArcPad 7.0.0.156 allows remote attackers to cause a denial of service ...CVE-2006-00895.0 Medium
- esri arcinfo workstationFormat string vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0 allows local users to gain...CVE-2005-1394Public exploit7.2 High
- esri arcinfo workstationMultiple buffer overflows in ArcGIS for ESRI ArcInfo Workstation 9.0 allow local users to execute...CVE-2005-13934.6 Medium