Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

ArcGIS Server — Vulnerabilities & Security Advisories 54

All 54 CVE vulnerabilities found in ArcGIS Server, with AI-generated Chinese analysis, references, and POCs.

Vendor: Esri

CVE IDTitleCVSSSeverityPublished
CVE-2025-67711 Reflected XSS vulnerability in ArcGIS Server. CWE-79 6.1 Medium2025-12-31
CVE-2025-67710 Stored XSS vulnerability in ArcGIS Server CWE-79 6.1 Medium2025-12-31
CVE-2025-67709 There is a cross site scripting issue in ArcGIS Server. CWE-79 6.1 Medium2025-12-31
CVE-2025-67708 Reflected cross-site scripting (XSS) vulnerability in ArcGIS Server. CWE-79 6.1 Medium2025-12-31
CVE-2025-67707 Unvalidated File Upload vulnerability in ArcGIS Server. CWE-434 5.6 Medium2025-12-31
CVE-2025-67706 Unvalidated File Upload vulnerability in ArcGIS Server. CWE-434 5.6 Medium2025-12-31
CVE-2025-67705 Reflected XSS vulnerability in ArcGIS Server. CWE-79 6.1 Medium2025-12-31
CVE-2025-67704 Stored XSS vulnerability in ArcGIS Server. CWE-79 6.1 Medium2025-12-31
CVE-2025-67703 Stored XSS vulnerability in ArcGIS Server. CWE-79 6.1 Medium2025-12-31
CVE-2025-57870 BUG-000179884 - There is a security vulnerability in ArcGIS Server Feature Services. CWE-89 10.0 Critical2025-10-22
CVE-2024-51966 Directory traversal vulnerability in ArcGIS Server CWE-22 4.9 Medium2025-03-03
CVE-2024-51963 Stored XSS in ArcGIS Server Manager CWE-79 4.8 Medium2025-03-03
CVE-2024-51962 SQL injection vulnerability in ArcGIS Server CWE-89 8.7 High2025-03-03
CVE-2024-51961 Local file inclusion (LFI) vulnerability in ArcGIS Server CWE-73 7.5 High2025-03-03
CVE-2024-51960 Stored XSS in ArcGIS Server Administrator Directory CWE-79 4.8 Medium2025-03-03
CVE-2024-51959 Stored XSS issue in Server Admin API CWE-79 4.8 Medium2025-03-03
CVE-2024-51958 Directory traversal vulnerability in the admin api for service thumbnails CWE-22 4.9 Medium2025-03-03
CVE-2024-51957 Stored XSS vulnerability in ArcGIS Rest Services Directory CWE-79 4.8 Medium2025-03-03
CVE-2024-51956 Stored XSS vulnerability in ArcGIS Server Administrator Directory CWE-79 4.8 Medium2025-03-03
CVE-2024-51954 Unauthorized access to secure services in ArcGIS Server CWE-284 8.5 High2025-03-03
CVE-2024-51953 Stored XSS in ArcGIS Server Rest services CWE-79 4.8 Medium2025-03-03
CVE-2024-51952 Stored XSS issue in ArcGIS Server CWE-79 4.8 Medium2025-03-03
CVE-2024-51951 Stored XSS in Server Admin API CWE-79 4.8 Medium2025-03-03
CVE-2024-51950 Stored XSS in Server Admin under Services > lifecycleinfos CWE-79 4.8 Medium2025-03-03
CVE-2024-51949 Stored XSS vulnerability in Rest Services under OGCFeature Service and Map Service CWE-79 4.8 Medium2025-03-03
CVE-2024-51948 Stored XSS vulnerability in Rest Services under Job ID CWE-79 4.8 Medium2025-03-03
CVE-2024-51947 Stored XSS vulnerability in Rest Services under Layer name CWE-79 4.8 Medium2025-03-03
CVE-2024-51946 Stored XSS in Rest Services Directory under Identify operation CWE-79 4.8 Medium2025-03-03
CVE-2024-51945 Stored XSS issues in Server Admin API CWE-79 4.8 Medium2025-03-03
CVE-2024-51944 Stored XSS in Rest Services Directory CWE-79 4.8 Medium2025-03-03

All 54 known CVE vulnerabilities affecting ArcGIS Server with full Chinese analysis, references, and POCs where available.