Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2021-29114

SQL injection vulnerability in ArcGIS Server

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Esri

Description

A SQL injection vulnerability in feature services provided by Esri ArcGIS Server 10.9 and below allows a remote, unauthenticated attacker to impact the confidentiality, integrity and availability of targeted services via specifically crafted queries.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Esri ArcGIS Server

  • All to < 10.9.0affected

References