CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2023-25848

ArcGIS Enterprise Server versions 11.0 and below have an information disclosure vulnerability where a remote, unauthorized attacker may submit a crafted query that may result in a low severity information disclosure issue. The information disclosed is limited to a single attribute in a database connection string. No business data is disclosed.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 29.0%

CVSS Severity

CVSS v3 Score 5.3

References

https://www.esri.com/arcgis-blog/products/trust-arcgis/announcements/arcgis-server-map-and-feature-service-security-2023-update-1-patch/
https://www.esri.com/arcgis-blog/products/trust-arcgis/announcements/arcgis-server-map-and-feature-service-security-2023-update-1-patch/

Products affected by CVE-2023-25848

Esri » Arcgis Server » Version: 10.8.1

cpe:2.3:a:esri:arcgis_server:10.8.1
Esri » Arcgis Server » Version: 10.9.0

cpe:2.3:a:esri:arcgis_server:10.9.0
Esri » Arcgis Server » Version: 10.9.1

cpe:2.3:a:esri:arcgis_server:10.9.1
Esri » Arcgis Server » Version: 11.0

cpe:2.3:a:esri:arcgis_server:11.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-25848

Products

Pricing

Contact Us