CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2021-29101

ArcGIS GeoEvent Server versions 10.8.1 and below has a read-only directory path traversal vulnerability that could allow an unauthenticated, remote attacker to perform directory traversal attacks and read arbitrary files on the system.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.016

EPSS Ranking 81.2%

CVSS Severity

CVSS v3 Score 8.6

CVSS v2 Score 5.0

References

https://www.esri.com/arcgis-blog/products/ext-server-geoevent/administration/arcgis-geoevent-server-security-update-2021-patch-1
https://www.esri.com/arcgis-blog/products/ext-server-geoevent/administration/arcgis-geoevent-server-security-update-2021-patch-1

Products affected by CVE-2021-29101

Esri » Arcgis Geoevent Server » Version: N/A

cpe:2.3:a:esri:arcgis_geoevent_server:-
Esri » Arcgis Geoevent Server » Version: 10.8.1

cpe:2.3:a:esri:arcgis_geoevent_server:10.8.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-29101

Products

Pricing

Contact Us