Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2022-38196

BUG-000150537 - ArcGIS Server has a local file inclusion (LFI) vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Esri

Description

Esri ArcGIS Server versions 10.9.1 and prior have a path traversal vulnerability that may result in a denial of service by allowing a remote, authenticated attacker to overwrite internal ArcGIS Server directory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Esri ArcGIS Server

  • All to ≤ 10.9.1affected

References