PT-2025-9562 · Esri · Arcgis Server

CVE-2024-51962

·

Publicado

2025-02-18

·

Atualizado

2026-02-06

CVSS v3.1

9.6

Crítica

VetorAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions ArcGIS Server (affected versions not specified)
Description A SQL injection issue allows a remote authenticated user with elevated privileges to execute SQL injection, potentially modifying column properties. This has a high impact on integrity and confidentiality, with no impact on availability.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

BDU:2025-02367
CVE-2024-51962

Produtos afetados

Arcgis Server