Read the docs

Esri

Records195All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical19CVSS 9.0–10.0
CVSS high35CVSS 7.0–8.9

Exploited now

Esri records in CISA KEV

No Esri vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Portal For Arcgis 88 records HIGH Arcgis Server 69 records MEDIUM Arcgis Pro 6 records MEDIUM Arcreader 6 records MEDIUM Arcgis Enterprise 5 records LOW Arcmap 4 records MEDIUM Arcgis Engine 3 records MEDIUM Arcgis Allsource 2 records LOW

Records

6 records in Arcgis Pro · all components

TI-2021-09985 CVE-2021-29098 · GHSA-5gqj-6vcf-6f45

ArcGIS general raster security update: uninitialized pointer

Priority MEDIUM 40

Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allow an unauthenticated attacke…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02021 Published 2021-03-25 Fixed in 10.9.0, 4.7.2 CWE-824
TI-2021-09984 CVE-2021-29097 · GHSA-wr7p-7f4r-37fr

ArcGIS general raster security update: buffer overflow

Priority LOW 39

Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allow an unauthenticated attacker to a…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02988 Published 2021-03-25 Fixed in 10.9.0, 4.7.2 +1 CWE-121
TI-2021-09983 CVE-2021-29096 · GHSA-8vhv-h63p-g472

ArcGIS general raster security update: use-after-free

Priority LOW 37

A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allows an unauthenticated attacker to achieve ar…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01577 Published 2021-03-25 Fixed in 10.9.0 CWE-416
TI-2025-00907 CVE-2025-1068 · GHSA-275c-3cvw-rvcg

There is a code injection vulnerability in Esri ArcGIS AllSource

Priority LOW 33

There is an untrusted search path vulnerability in Esri ArcGIS AllSource 1.2 and 1.3 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the file…

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00217 Published 2025-02-25 No fix listed CWE-426
TI-2025-00906 CVE-2025-1067 · GHSA-2gg3-vm5q-jcq2

There is a code injection vulnerability in ArcGIS Pro

Priority LOW 33

There is an untrusted search path vulnerability in Esri ArcGIS Pro 3.3 and 3.4 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem…

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00189 Published 2025-02-25 No fix listed CWE-732
Open these records in search →