Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Esri Component: Arcgis Allsource Clear all filters
TI-2025-00907 CVE-2025-1068 · GHSA-275c-3cvw-rvcg

There is a code injection vulnerability in Esri ArcGIS AllSource

Priority LOW 33

There is an untrusted search path vulnerability in Esri ArcGIS AllSource 1.2 and 1.3 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the file…

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00217 Published 2025-02-25 No fix listed CWE-426
TI-2025-00906 CVE-2025-1067 · GHSA-2gg3-vm5q-jcq2

There is a code injection vulnerability in ArcGIS Pro

Priority LOW 33

There is an untrusted search path vulnerability in Esri ArcGIS Pro 3.3 and 3.4 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem…

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00189 Published 2025-02-25 No fix listed CWE-732