| Package | Affected versions | Patched versions |
|---|---|---|
| arcgis server | = 10.7.1= 10.8.1= 10.9.1 |
A remote file download issue can occur in some capabilities of Esri ArcGIS Server web services that may in some edge cases allow a remote, unauthenticated attacker to induce an unsuspecting victim to launch a process in the victim's PATH environment. Current browsers provide users with warnings against running unsigned executables downloaded from the internet.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free