Skip to content
OpenAdvisories

Product · Esri

ArcGIS Enterprise Server

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-25848

    BUG-000158039 - There is an information disclosure issue in ArcGIS Server.

    ArcGIS Enterprise Server versions 11.0 and below have an information disclosure vulnerability where a remote, unauthorized attacker may submit a crafted query that may result in a low severity information disclosure issue. The information disclosed is limited…

    Esri ArcGIS Enterprise Server
  • Medium 6.1
    CVE-2023-25841

    BUG-000158075 Stored XSS issue in ArcGIS Server

    There is a stored Cross-site Scripting vulnerability in Esri ArcGIS Server versions 11.0 and below on Windows and Linux platforms that may allow a remote, unauthenticated attacker to create crafted content which when clicked could potentially execute arbitrar…

    Esri ArcGIS Enterprise Server