Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Esri ArcGIS Server 10.9.0 Clear all filters
TI-2021-09991 CVE-2021-29104 · GHSA-73pm-86xr-fm7x

There is a stored Cross Site Scripting (XXS) vulnerability in ArcGIS Server Manager version 10.8.1 and below.

Priority LOW 29

A stored Cross Site Scripting (XXS) vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote unauthenticated attacker to pass and store malicious strings in the ArcGIS Server Manager application…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0081 Published 2021-07-11 Fixed in 10.9.0 CWE-79
TI-2021-09989 CVE-2021-29102 · GHSA-hjmx-9q6q-qmpx

There is a Server-Side Request Forgery (SSRF) vulnerability in Esri ArcGIS Server Manager version 10.8.1 and below.

Priority MEDIUM 50

A Server-Side Request Forgery (SSRF) vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote, unauthenticated attacker to forge GET requests to arbitrary URLs from the system, potentially leadi…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0158 Published 2021-07-11 Fixed in 10.9.0 CWE-918
TI-2021-09992 CVE-2021-29105 · GHSA-5p56-v5jg-hm5x

Cross-site scripting in Esri ArcGIS Server

Priority LOW 25

A stored Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server Services Directory version 10.8.1 and below may allow a remote authenticated attacker to pass and store malicious strings in the ArcGIS Services Dir…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00602 Published 2021-07-11 Fixed in 10.9.0 CWE-79