EUVD-2021-15756

Malware in sbrugna...

The vulnerability of the ArcGIS Service Directory component in multi-user GIS software for ArcGIS Enterprise allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ArcGIS Service Directory component in multi-user GIS solutions developed with ArcGIS Enterprise relates to the disclosure of information in error-prone data areas. Exploiting this vulnerability could allow an attacker to gain access to confidential data remotely...

CVE-2021-29115 An information disclosure vulnerability

An information disclosure vulnerability in the ArcGIS Service Directory in Esri ArcGIS Enterprise versions 10.9.0 and below may allows a remote attacker to view hidden field names in feature layers. This issue may reveal field names, but not not disclose features...