Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2023-25848

BUG-000158039 - There is an information disclosure issue in ArcGIS Server.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Esri

Description

ArcGIS Enterprise Server versions 11.0 and below have an information disclosure vulnerability where a remote, unauthorized attacker may submit a crafted query that may result in a low severity information disclosure issue. The information disclosed is limited to a single attribute in a database connection string. No business data is disclosed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Esri ArcGIS Enterprise Server

Default version status: unaffected

  • 10.8.1affected
  • 10.9.1affected
  • 11.0affected
  • 11.1affected

References