Esri ArcGIS Server

• CVE-2021-29116 Medium 6.1 BUG-000142180 Hosted feature services vulnerable to stored XSS 0.8%
• CVE-2021-29115 Medium 5.3 An information disclosure vulnerability 2.2%
• CVE-2021-29114 High 7.3 SQL injection vulnerability in ArcGIS Server 1.0%
• CVE-2021-29113 Medium 4.7 Remote file inclusion vulnerability in ArcGIS Server help documentation 0.8%
• CVE-2021-29104 Medium 6.1 There is a stored Cross Site Scripting (XXS) vulnerability in ArcGIS Server Manager version 10.8.1 and below. 0.8%
• CVE-2021-29102 Critical 9.1 There is a Server-Side Request Forgery (SSRF) vulnerability in Esri ArcGIS Server Manager version 10.8.1 and below. 1.6%
• CVE-2021-29103 Medium 6.1 There is a reflected Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server version 10.8.1 and below. 0.7%
• CVE-2021-29105 Medium 5.4 There is a stored Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server Services Directory version 10.8.1 and below. 0.6%
• CVE-2021-29106 Medium 4.7 There is a reflected Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server version 10.8.1 and below. 0.7%
• CVE-2021-29107 Medium 6.1 There is a stored Cross Site Scripting (XXS) vulnerability in ArcGIS Server Manager version 10.8.1 and below. 0.9%
• CVE-2021-29099 Medium 5.3 There is a SQL injection vulnerability in ArcGIS Server 0.6%
• CVE-2021-29095 Medium 6.4 ArcGIS Server image service and raster analytics security update: uninitialized pointer 0.9%
• CVE-2021-29094 Medium 6.4 ArcGIS Server image service and raster analytics security update: buffer overflow 1.0%
• CVE-2021-29093 Medium 6.4 ArcGIS Server image service and raster analytics security update: use-after-free 1.0%