esri

168 tracked vulnerabilities.

CVE-2021-29096 HIGH
Esri ArcGIS Engine < 10.8.1, ArcGIS Pro < 2.7, ArcMap < 10.8.1, ArcReader < 10.8.1 - Use-After-Free via Crafted File
Mar 25, 2021
CVSS 7.8
EPSS 0.00
CVE-2020-35712 CRITICAL
Esri ArcGIS Server < 10.8 - Server-Side Request Forgery
Dec 26, 2020
CVSS 9.8
EPSS 0.00
CVE-2019-16193 MEDIUM
ArcGIS Enterprise 10.6.1 - Cross-Site Scripting via EDIT MY PROFILE IFRAME Injection
Sep 11, 2019
CVSS 5.4
EPSS 0.00
CVE-2015-2002 CRITICAL
ESRI ArcGis Runtime SDK <10.2.6-2 - RCE
Mar 29, 2018
CVSS 9.8
EPSS 0.01
CVE-2014-9741
ESRI ArcGIS for Desktop, ArcGIS for Engine, and ArcGIS for Server < 10.2.2 - Cross-Site Scripting
Jul 08, 2015
EPSS 0.00
CVE-2014-5122
ESRI ArcGIS for Server 10.1.1 - Open Redirect via Login Parameter
Aug 22, 2014
EPSS 0.00
CVE-2014-5121
Esri Arcgis Server - XSS
Aug 22, 2014
EPSS 0.00
CVE-2013-7232
ESRI ArcGIS for Server < 10.2 - SQL Injection via Map or Feature Service Input
Dec 30, 2013
EPSS 0.00
CVE-2013-7231
ESRI ArcGIS for Server 10.1 and 10.2 - Authenticated Cross-Site Scripting
Dec 30, 2013
EPSS 0.00
CVE-2013-5222
ESRI ArcGIS for Server 10.1 - Authenticated Cross-Site Scripting
Dec 30, 2013
EPSS 0.00
CVE-2013-5221
Esri ArcGIS for Server <10.3 - Command Injection
Sep 24, 2013
EPSS 0.00
CVE-2012-4949
ESRI ArcGIS Server 10.1 - Authenticated SQL Injection via REST Service Query Where Parameter
Nov 14, 2012
EPSS 0.01
CVE-2012-1661
ESRI ArcMap < 10.0.2.3200 - Arbitrary VBA Code Execution via Crafted Map File
Jul 12, 2012
EPSS 0.01
CVE-2007-4278
ESRI ArcSDE 9.2 - Stack-based Buffer Overflow via Large ASCII Number in giomgr Process
Aug 15, 2007
EPSS 0.05
CVE-2007-1770
ESRI ArcSDE - Buffer Overflow via Long Parameters in Three-Tiered Configurations
Mar 30, 2007
EPSS 0.27
CVE-2006-0089
ESRI ArcPad < 7.0.0.156 - Buffer Overflow via COORDSYS Tag in .amp File
Jan 05, 2006
EPSS 0.02
CVE-2005-1393
ArcGIS for ESRI ArcInfo Workstation 9.0 - Buffer Overflow
May 03, 2005
EPSS 0.00
CVE-2005-1394
ArcGIS for ESRI ArcInfo Workstation 9.0 - Privilege Escalation
May 03, 2005
EPSS 0.01
Products
portal_for_arcgis 73 arcgis_server 67 arcgis_pro 6 arcreader 6 arcgis_enterprise 5 arcmap 4 arcgis_engine 3 ArcGIS Server 2 Portal for ArcGIS 2 arcgis_allsource 2 arcgis_insights 2 arcinfo_workstation 2 arcsde 2 ArcGIS Enterprise Builder 1 ArcGIS Monitor 1 ArcGIS Web AppBuilder {Developer Edition) 1 arcgis_earth 1 arcgis_for_desktop 1 arcgis_for_engine 1 arcgis_geoevent_server 1 arcgis_quickcapture 1 arcgisruntime_sdk 1 arcpad 1
Quick Filters
Critical CVEs With Exploits In CISA KEV