Vulnerabilities > Esri > Arcgis Insights > High

DATE CVE VULNERABILITY TITLE RISK
2023-07-19 CVE-2023-25838 SQL Injection vulnerability in Esri Arcgis Insights 2022.1
There is SQL injection vulnerability in Esri ArcGIS Insights 2022.1 for ArcGIS Enterprise and that may allow a remote, authorized attacker to execute arbitrary SQL commands against the back-end database.
network
high complexity
esri CWE-89
7.5
2023-07-19 CVE-2023-25839 SQL Injection vulnerability in Esri Arcgis Insights 2022.1
There is SQL injection vulnerability in Esri ArcGIS Insights Desktop for Mac and Windows version 2022.1 that may allow a local, authorized attacker to execute arbitrary SQL commands against the back-end database.
local
high complexity
esri CWE-89
7.0