VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 11, 2021· Updated Apr 10, 2025

There is a Server-Side Request Forgery (SSRF) vulnerability in Esri ArcGIS Server Manager version 10.8.1 and below.

CVE-2021-29102

Description

A Server-Side Request Forgery (SSRF) vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote, unauthenticated attacker to forge GET requests to arbitrary URLs from the system, potentially leading to network enumeration or facilitating other attacks.

Affected products

2
  • Esri/Arcgis Serverllm-fuzzy2 versions
    <=10.8.1+ 1 more
    • (no CPE)range: <=10.8.1
    • (no CPE)range: All

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.