Esri Arcgis Server vulnerabilities
69 published vulnerabilities in Esri Arcgis Server. The most were published in 2024 (23), and 4 so far in 2026.
Esri Arcgis Server vulnerabilities by year
2012
2013
2014
2020
2021
2022
2023
2024
2025
2026
Most exploited Esri Arcgis Server vulnerabilities
- CVE-2025-57870 BUG-000179884 - There is a security vulnerability in ArcGIS Server Feature Services.
- CVE-2026-9181 Directory Traversal in ArcGIS Server
- CVE-2026-9182 Unvalidated File Upload vulnerability in ArcGIS Server.
- CVE-2020-35712 Server-side request forgery in n/a
- CVE-2021-29102 There is a Server-Side Request Forgery (SSRF) vulnerability in Esri ArcGIS Server Manager version 10.8.1 and below.
- CVE-2024-51962 SQL injection vulnerability in ArcGIS Server
- CVE-2024-51954 Unauthorized access to secure services in ArcGIS Server
- CVE-2024-51961 Local file inclusion (LFI) vulnerability in ArcGIS Server
- CVE-2022-38202 BUG-000152121 - Directory traversal vulnerability in ArcGIS Server.
- CVE-2013-7232 SQL injection in n/a
- CVE-2021-29114 SQL injection vulnerability in ArcGIS Server
- CVE-2022-38196 BUG-000150537 - ArcGIS Server has a local file inclusion (LFI) vulnerability
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.