Vulnerabilities > Esri > Arcgis Server

DATE CVE VULNERABILITY TITLE RISK
2021-03-25 CVE-2021-29093 Use After Free vulnerability in Esri Arcgis Server
A use-after-free vulnerability when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 (and earlier) allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account.
network
low complexity
esri CWE-416
6.8
6.8
2020-12-26 CVE-2020-35712 Server-Side Request Forgery (SSRF) vulnerability in Esri Arcgis Server
Esri ArcGIS Server before 10.8 is vulnerable to SSRF in some configurations.
network
low complexity
esri CWE-918
critical
 9.8
9.8