İçeriğe atla
Noroxi

Esri kayıtları

esri üreticisine ait 182 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
33
Düzeltme kaydı olan
%1,1
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

182 kayıt
  • CVE-2007-1770
    45Planlayın

    Buffer overflow in the ArcSDE service (giomgr) in Environmental Systems Research Institute (ESRI) ArcGIS before 9.2 Service Pack 2, when usi

    KritikCVSS 10,0Kavram kanıtıEPSS %17

    esri · arcsde29 Mar 2007

  • CVE-2012-1661
    44Planlayın

    ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, which allows user-assi

    KritikCVSS 9,3Kavram kanıtıEPSS %24

    esri · arcmap12 Tem 2012

  • CVE-2015-2002
    40Planlayın

    The ESRI ArcGis Runtime SDK before 10.2.6-2 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a

    KritikCVSS 9,8İstismar yokEPSS %2

    esri · arcgisruntime sdk29 Mar 2018

  • CVE-2025-57870
    40Planlayın

    BUG-000179884 - There is a security vulnerability in ArcGIS Server Feature Services.

    KritikCVSS 10,0İstismar yokEPSS %1

    esri · arcgis server22 Eki 2025

  • CVE-2020-35712
    39İzleyin

    Esri ArcGIS Server before 10.8 is vulnerable to SSRF in some configurations.

    KritikCVSS 9,8İstismar yokEPSS %2

    esri · arcgis server25 Ara 2020

  • CVE-2024-25693
    39İzleyin

    Portal for ArcGIS has a directory traversal vulnerability.

    KritikCVSS 9,9İstismar yokEPSS %1

    esri · portal for arcgis4 Nis 2024

  • CVE-2021-29114
    39İzleyin

    SQL injection vulnerability in ArcGIS Server

    KritikCVSS 9,8İstismar yokEPSS %1

    esri · arcgis server7 Ara 2021

  • CVE-2026-13019
    39İzleyin

    Missing Authentication

    KritikCVSS 9,8İstismar yokEPSS %1

    esri · portal for arcgis7 Tem 2026

  • CVE-2026-9182
    39İzleyin

    Unvalidated File Upload vulnerability in ArcGIS Server.

    KritikCVSS 9,8İstismar yokEPSS %1

    esri · arcgis server6 Tem 2026

  • CVE-2025-2538
    39İzleyin

    A hardcoded credential vulnerability exists in a specific deployment pattern for Esri Portal for ArcGIS versions 11.4 and below that may all

    KritikCVSS 9,8İstismar yokEPSS %1

    esri · portal for arcgis20 Mar 2025

  • CVE-2026-33519
    39İzleyin

    Incorrect privilege assignment in Portal for ArcGIS

    KritikCVSS 9,8İstismar yokEPSS %0

    esri · portal for arcgis21 Nis 2026

  • CVE-2026-13020
    39İzleyin

    Weak Password Recovery Mechanism in Portal for ArcGIS

    KritikCVSS 9,8İstismar yokEPSS %0

    esri · portal for arcgis7 Tem 2026

  • CVE-2022-38193
    38İzleyin

    Code injection issue in Portal for ArcGIS (10.7.1 and 10.8.1)

    KritikCVSS 9,6İstismar yokEPSS %1

    esri · portal for arcgis16 Ağu 2022

  • CVE-2021-29102
    36İzleyin

    There is a Server-Side Request Forgery (SSRF) vulnerability in Esri ArcGIS Server Manager version 10.8.1 and below.

    KritikCVSS 9,1İstismar yokEPSS %2

    esri · arcgis server10 Tem 2021

  • CVE-2025-4967
    36İzleyin

    Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS

    KritikCVSS 9,1İstismar yokEPSS %1

    esri · portal for arcgis29 May 2025

  • CVE-2021-29108
    35İzleyin

    There is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below.

    YüksekCVSS 8,8İstismar yokEPSS %1

    esri · portal for arcgis1 Eki 2021

  • CVE-2023-25832
    35İzleyin

    BUG-000148346 There is a Cross-Site Request Forgery (CSRF) vulnerability in Portal for ArcGIS.

    YüksekCVSS 8,8İstismar yokEPSS %0

    esri · portal for arcgis9 May 2023

  • CVE-2024-25699
    34İzleyin

    Portal for ArcGIS has an invalid authentication vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %1

    esri · portal for arcgis4 Nis 2024

  • CVE-2024-51962
    34İzleyin

    SQL injection vulnerability in ArcGIS Server

    YüksekCVSS 8,7İstismar yokEPSS %1

    esri · arcgis server3 Mar 2025

  • CVE-2024-51954
    34İzleyin

    Unauthorized access to secure services in ArcGIS Server

    YüksekCVSS 8,5İstismar yokEPSS %0

    linux · linux kernel3 Mar 2025

  • CVE-2023-25837
    33İzleyin

    BUG-000133088 - ArcGIS Enterprise site builder is subject to stored XSS.

    YüksekCVSS 8,4İstismar yokEPSS %1

    esri · portal for arcgis21 Tem 2023

  • CVE-2023-25835
    33İzleyin

    BUG-000153659 ArcGIS Enterprise Sites has a stored XSS vulnerability

    YüksekCVSS 8,4İstismar yokEPSS %1

    esri · portal for arcgis20 Tem 2023

  • CVE-2021-29097
    32İzleyin

    ArcGIS general raster security update: buffer overflow

    YüksekCVSS 7,8İstismar yokEPSS %2

    esri · arcgis engine25 Mar 2021

  • CVE-2021-29098
    32İzleyin

    ArcGIS general raster security update: uninitialized pointer

    YüksekCVSS 7,8İstismar yokEPSS %2

    esri · arcgis engine25 Mar 2021

  • CVE-2022-38196
    32İzleyin

    BUG-000150537 - ArcGIS Server has a local file inclusion (LFI) vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %1

    esri · arcgis server25 Eki 2022