Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Esri ArcGIS Server 10.9.0 Clear all filters
TI-2021-10002 CVE-2021-29116 · GHSA-g47m-f7f9-9p9x

BUG-000142180 Hosted feature services vulnerable to stored XSS

Priority LOW 29

A stored Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server feature services versions 10.8.1 and 10.9 (only) feature services may allow a remote, unauthenticated attacker to pass and store malicious strings v…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0081 Published 2021-12-07 Fixed in 10.9.0 CWE-79
TI-2021-10000 CVE-2021-29114 · GHSA-p4m7-49xq-h85c

SQL injection vulnerability in ArcGIS Server

Priority MEDIUM 50

A SQL injection vulnerability in feature services provided by Esri ArcGIS Server 10.9 and below allows a remote, unauthenticated attacker to impact the confidentiality, integrity and availability of targeted services via…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01043 Published 2021-12-07 Fixed in 10.9.0 CWE-89