Vulnerabilities > Esri
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-10-01 | CVE-2021-29110 | Cross-site Scripting vulnerability in Esri Portal for Arcgis Stored cross-site scripting (XSS) issue in Esri Portal for ArcGIS may allow a remote unauthenticated attacker to pass and store malicious strings in the home application. | 5.4 |
| 2021-07-11 | CVE-2021-29102 | Server-Side Request Forgery (SSRF) vulnerability in Esri Arcgis Server A Server-Side Request Forgery (SSRF) vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote, unauthenticated attacker to forge GET requests to arbitrary URLs from the system, potentially leading to network enumeration or facilitating other attacks. | 9.1 |
| 2021-07-11 | CVE-2021-29103 | Cross-site Scripting vulnerability in Esri Arcgis Server A reflected Cross Site Scripting (XXS) vulnerability in ArcGIS Server version 10.8.1 and below may allow a remote attacker able to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the user’s browser. | 6.1 |
| 2021-07-11 | CVE-2021-29104 | Cross-site Scripting vulnerability in Esri Arcgis Server A stored Cross Site Scripting (XXS) vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote unauthenticated attacker to pass and store malicious strings in the ArcGIS Server Manager application. | 6.1 |
| 2021-07-11 | CVE-2021-29105 | Cross-site Scripting vulnerability in Esri Arcgis Server A stored Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server Services Directory version 10.8.1 and below may allow a remote authenticated attacker to pass and store malicious strings in the ArcGIS Services Directory. | 5.4 |
| 2021-07-10 | CVE-2021-29106 | Cross-site Scripting vulnerability in Esri Arcgis Server A reflected Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server version 10.8.1 and below may allow a remote attacker able to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the user’s browser. | 6.1 |
| 2021-07-10 | CVE-2021-29107 | Cross-site Scripting vulnerability in Esri Arcgis Server 10.6.1 A stored Cross Site Scripting (XXS) vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote unauthenticated attacker to pass and store malicious strings in the ArcGIS Server Manager application. | 6.1 |
| 2021-06-07 | CVE-2021-29099 | SQL Injection vulnerability in Esri Arcgis Server A SQL injection vulnerability exists in some configurations of ArcGIS Server versions 10.8.1 and earlier. | 5.3 |
| 2021-05-05 | CVE-2021-29101 | Path Traversal vulnerability in Esri Arcgis Geoevent Server 10.8.1 ArcGIS GeoEvent Server versions 10.8.1 and below has a read-only directory path traversal vulnerability that could allow an unauthenticated, remote attacker to perform directory traversal attacks and read arbitrary files on the system. | 7.5 |
| 2021-05-05 | CVE-2021-29100 | Path Traversal vulnerability in Esri Arcgis Earth A path traversal vulnerability exists in Esri ArcGIS Earth versions 1.11.0 and below which allows arbitrary file creation on an affected system through crafted input. | 7.8 |