arcgis vulnerabilities and exploits

(subscribe to this query)

A remote file download issue can occur in some capabilities of Esri ArcGIS Server web services that may in some edge cases allow a remote, unauthenticated malicious user to induce an unsuspecting victim to launch a process in the victim's PATH environment. Current browsers p...

Esri Arcgis Server Esri Arcgis Server 10.7.1 Esri Arcgis Server 10.8.1 Esri Arcgis Server 10.9.1

There is a local file inclusion vulnerability in Esri Portal for ArcGIS 11.2 and below that may allow a remote, unauthenticated malicious user to craft a URL that could potentially disclose sensitive configuration information by reading internal files.

Esri Portal For Arcgis 10.8.1 Esri Portal For Arcgis 10.9.1 Esri Portal For Arcgis 11.1 Esri Portal For Arcgis 11.2 Esri Portal For Arcgis Esri Portal For Arcgis 11.0

Multiple cross-site scripting (XSS) vulnerabilities in ESRI ArcGIS for Desktop, ArcGIS for Engine, and ArcGIS for Server 10.2.2 and previous versions allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Esri Arcgis For Desktop Esri Arcgis For Engine Esri Arcgis Server

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 11.1 and below which may allow a remote, unauthenticated malicious user to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser.

Esri Portal For Arcgis -Esri Portal For Arcgis Esri Portal For Arcgis 10.8.1 Esri Portal For Arcgis 10.9.1 Esri Portal For Arcgis 11.1

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 11.1 which may allow a remote, unauthenticated malicious user to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser.

Esri Portal For Arcgis -Esri Portal For Arcgis Esri Portal For Arcgis 10.7.1 Esri Portal For Arcgis 10.8.1 Esri Portal For Arcgis 10.9.1

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1 and below which may allow a remote, unauthenticated malicious user to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser.

Esri Portal For Arcgis -Esri Portal For Arcgis Enterprise Experience Builder Esri Portal For Arcgis 10.7.1 Esri Portal For Arcgis 10.8.1 Esri Portal For Arcgis 10.9.1

A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and previous versions) and ArcGIS Pro 2.7 (and previous versions) allows an unauthenticated malicious user to achieve arbitrary code execution in the cont...

Esri Arcreader Esri Arcgis Desktop Esri Arcgis Engine Esri Arcgis Desktop Background Geoprocessing Esri Arcgis Engine Background Geoprocessing Esri Arcgis Pro Esri Arcmap

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1and before which may allow a remote, unauthenticated malicious user to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser.

Esri Portal For Arcgis Esri Portal For Arcgis 10.7.1 Esri Portal For Arcgis 10.8.1 Esri Portal For Arcgis 10.9.1

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1and below which may allow a remote, unauthenticated malicious user to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser.

Esri Portal For Arcgis Esri Portal For Arcgis 10.7.1 Esri Portal For Arcgis 10.8.1 Esri Portal For Arcgis 10.9.1

There is an untrusted search path vulnerability in Esri ArcGIS Pro 3.3 and 3.4 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem. When the victim performs a specific action using ArcGIS Ar...

Esri Arcgis Pro Esri Arcgis Allsource 1.2 Esri Arcgis Allsource 1.3 Esri Arcgis Pro 3.3 Esri Arcgis Pro 3.4

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook