VendorsEsriarcgis_serverany version
Vulnerabilities

Esri ArcGIS Server any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

58CVEs
CVE-2024-51959
Stored XSS issue in Server Admin API
Published 2025-03-03 · Modified
4.8EPSS 0.003
CVE-2024-10904
Stored XSS in Server Admin API
Published 2025-03-03 · Modified
4.8EPSS 0.003
CVE-2024-51942
Stored XSS vulnerability in Rest Admin API under Hosted Feature Services page
Published 2025-03-03 · Modified
4.8EPSS 0.003
CVE-2024-51944
Stored XSS in Rest Services Directory
Published 2025-03-03 · Modified
4.8EPSS 0.003
CVE-2024-51945
Stored XSS issues in Server Admin API
Published 2025-03-03 · Modified
4.8EPSS 0.003
CVE-2024-51946
Stored XSS in Rest Services Directory under Identify operation
Published 2025-03-03 · Modified
4.8EPSS 0.003
CVE-2024-51947
Stored XSS vulnerability in Rest Services under Layer name
Published 2025-03-03 · Modified
4.8EPSS 0.003
CVE-2024-51948
Stored XSS vulnerability in Rest Services under Job ID
Published 2025-03-03 · Modified
4.8EPSS 0.003
CVE-2024-51950
Stored XSS in Server Admin under Services > lifecycleinfos
Published 2025-03-03 · Modified
4.8EPSS 0.003
CVE-2024-51951
Stored XSS in Server Admin API
Published 2025-03-03 · Modified
4.8EPSS 0.003
CVE-2024-51952
Stored XSS issue in ArcGIS Server
Published 2025-03-03 · Modified
4.8EPSS 0.003
CVE-2024-51953
Stored XSS in ArcGIS Server Rest services
Published 2025-03-03 · Modified
4.8EPSS 0.003
CVE-2024-51956
Stored XSS vulnerability in ArcGIS Server Administrator Directory
Published 2025-03-03 · Modified
4.8EPSS 0.003
CVE-2024-51957
Stored XSS vulnerability in ArcGIS Rest Services Directory
Published 2025-03-03 · Modified
4.8EPSS 0.003
CVE-2024-51960
Stored XSS in ArcGIS Server Administrator Directory
Published 2025-03-03 · Modified
4.8EPSS 0.003
CVE-2021-29113
Remote file inclusion vulnerability in ArcGIS Server help documentation
Published 2021-12-07 · Modified
4.7EPSS 0.008
CVE-2014-9741
Multiple cross-site scripting (XSS) vulnerabilities in ESRI ArcGIS for Desktop, ArcGIS for Engine, and ArcGIS for Server 10.2.2 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published 2015-07-08 · Modified
4.3EPSS 0.018
CVE-2023-25840
BUG-000154070 Stored XSS issue in the ArcGIS REST Services directory
Published 2023-07-21 · Modified
3.4EPSS 0.005
← Prev2 / 2