1822 matches found
CVE-2015-8277-Exploit
CVE-2015-8277 Exploit POC This is a proof of concept exploit for version 11.12.1.2 of lmgrdFlexera Licence Manager, that was bundled as part of Flexnet Publisher while deploying ArcGIS 10.3.1. Please refer to https://www.securifera.com/advisories/cve-2015-8277/ for more details...
CVE-2026-50095
There is a stored cross site scripting issue in Esri ArcGIS Server 11.1 and earlier on Windows and Linux that in some configurations allows a remote unauthenticated attacker to store files that contain malicious code that may execute in the context of a victim’s browser. A patch is provided for...
CVE-2026-50096
There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 12.1 and prior which may allow a remote, unauthenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser. A patch is provided...
CVE-2026-33520
There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 12.1 and prior which may allow a remote, unauthenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser. A patch is provided...
CVE-2026-33521
There is s denial of service vulnerability in Esri ArcGIS Server versions 12.0 and prior that may allow a remote, unauthenticated attacker to supply crafted requests that may, under exceptional circumstances, consume all available worker threads and deny service to users. A patch is provided for...
CVE-2026-33522
Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service metadata. A patch is provided for ArcGIS Server software in General Availability and Extended support status, which includes versions 12.0, 11.5, and 11.3. Other versions are in mature or...
CVE-2026-10757
There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows and Linux that may allow a remote attacker with privileges to access the service which could, depending on the service being configured in a non-default access configuration “public”, include an...
CVE-2026-50096 BUG-000187164 - ArcGIS Server has a security vulnerability.
There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 12.1 and prior which may allow a remote, unauthenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser. A patch is provided...
CVE-2026-50096
A reflected cross-site scripting (XSS) vulnerability exists in Esri Portal for ArcGIS versions 12.1 and prior. This flaw allows a remote, unauthenticated attacker to craft a malicious link that, when clicked, can execute arbitrary JavaScript code in the victim's browser. Remediation is available ...
EUVD-2026-110062
There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 12.1 and prior which may allow a remote, unauthenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser. A patch is provided...
CVE-2026-50095 BUG-000187165 - ArcGIS Server has a security vulnerability.
There is a stored cross site scripting issue in Esri ArcGIS Server 11.1 and earlier on Windows and Linux that in some configurations allows a remote unauthenticated attacker to store files that contain malicious code that may execute in the context of a victim’s browser. A patch is provided for...
CVE-2026-50095
Esri ArcGIS Server versions 11.1 and earlier on Windows and Linux are vulnerable to a stored cross-site scripting (XSS) issue. In certain configurations, a remote unauthenticated attacker can store files containing malicious code that executes within a victim's browser. Remediation is available v...
EUVD-2026-110061
There is a stored cross site scripting issue in Esri ArcGIS Server 11.1 and earlier on Windows and Linux that in some configurations allows a remote unauthenticated attacker to store files that contain malicious code that may execute in the context of a victim’s browser. A patch is provided for...
CVE-2026-50095 BUG-000187165 - ArcGIS Server has a security vulnerability.
There is a stored cross site scripting issue in Esri ArcGIS Server 11.1 and earlier on Windows and Linux that in some configurations allows a remote unauthenticated attacker to store files that contain malicious code that may execute in the context of a victim’s browser. A patch is provided for...
EUVD-2026-110060
Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service metadata. A patch is provided for ArcGIS Server software in General Availability and Extended support status, which includes versions 12.0, 11.5, and 11.3. Other versions are in mature or...
CVE-2026-33522 BUG-000182936 - ArcGIS Server has a security vulnerability.
Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service metadata. A patch is provided for ArcGIS Server software in General Availability and Extended support status, which includes versions 12.0, 11.5, and 11.3. Other versions are in mature or...
CVE-2026-33522 BUG-000182936 - ArcGIS Server has a security vulnerability.
Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service metadata. A patch is provided for ArcGIS Server software in General Availability and Extended support status, which includes versions 12.0, 11.5, and 11.3. Other versions are in mature or...
CVE-2026-33522
Esri ArcGIS Server versions 11.3 through 12.0 are vulnerable to a security flaw allowing a remote, unauthenticated attacker to update service metadata . The root cause is identified as Improper Authorization (CWE-285). A patch is available for versions 12.0, 11.5, and 11.3 in General Availability...
EUVD-2026-110059
There is s denial of service vulnerability in Esri ArcGIS Server versions 12.0 and prior that may allow a remote, unauthenticated attacker to supply crafted requests that may, under exceptional circumstances, consume all available worker threads and deny service to users. A patch is provided for...
CVE-2026-33521 BUG-000186514 - ArcGIS Server has a security vulnerability.
There is s denial of service vulnerability in Esri ArcGIS Server versions 12.0 and prior that may allow a remote, unauthenticated attacker to supply crafted requests that may, under exceptional circumstances, consume all available worker threads and deny service to users. A patch is provided for...