Esri vulnerabilities
177 CVEs and advisories name Esri as an affected vendor, newest first. Follow it as a feed.
- CVE-2022-38190Stored cross-site scripting vulnerability in Esri Portal for ArcGIS Configurable Apps
- CVE-2022-38186There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.8.1 and below which may allow a remote attacker able to convinc
- CVE-2021-29117arcreader use-after-free
- CVE-2021-29112Esri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2021-29118Esri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2021-29116BUG-000142180 Hosted feature services vulnerable to stored XSS
- CVE-2021-29115An information disclosure vulnerability
- CVE-2021-29114SQL injection vulnerability in ArcGIS Server
- CVE-2021-29113Remote file inclusion vulnerability in ArcGIS Server help documentation
- CVE-2021-29110Stored cross-site scripting (XSS) issue in Esri Portal for ArcGIS may allow a remote unauthenticated attacker to pass and store malicious strings in the home application.
- CVE-2021-29109A reflected XSS vulnerability in Esri Portal for ArcGIS version 10.9.
- CVE-2021-29108There is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below.
- CVE-2021-29104There is a stored Cross Site Scripting (XXS) vulnerability in ArcGIS Server Manager version 10.8.1 and below.
- CVE-2021-29102There is a Server-Side Request Forgery (SSRF) vulnerability in Esri ArcGIS Server Manager version 10.8.1 and below.
- CVE-2021-29103There is a reflected Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server version 10.8.1 and below.
- CVE-2021-29105There is a stored Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server Services Directory version 10.8.1 and below.
- CVE-2021-29106There is a reflected Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server version 10.8.1 and below.
- CVE-2021-29107There is a stored Cross Site Scripting (XXS) vulnerability in ArcGIS Server Manager version 10.8.1 and below.
- CVE-2021-29099There is a SQL injection vulnerability in ArcGIS Server
- CVE-2021-29101ArcGIS GeoEvent Server has a Directory Traversal security vulnerability.
- CVE-2021-29100ArcGIS Earth has a File Parsing Directory Traversal Vulnerability
- CVE-2021-29098ArcGIS general raster security update: uninitialized pointer
- CVE-2021-29097ArcGIS general raster security update: buffer overflow
- CVE-2021-29095ArcGIS Server image service and raster analytics security update: uninitialized pointer
- CVE-2021-29094ArcGIS Server image service and raster analytics security update: buffer overflow
- CVE-2021-29093ArcGIS Server image service and raster analytics security update: use-after-free
- CVE-2021-29096ArcGIS general raster security update: use-after-free