Medium severity5.4NVD Advisory· Published Jul 11, 2021· Updated Jun 17, 2026
CVE-2021-29105
CVE-2021-29105
Description
A stored Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server Services Directory version 10.8.1 and below may allow a remote authenticated attacker to pass and store malicious strings in the ArcGIS Services Directory.
Affected products
3cpe:2.3:a:esri:arcgis_server:*:*:*:*:*:*:x64:*+ 1 more
- cpe:2.3:a:esri:arcgis_server:*:*:*:*:*:*:x64:*range: <10.9.0
- (no CPE)range: All
- Range: <=10.8.1
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.