High severity7.5NVD Advisory· Published Dec 28, 2022· Updated Jun 17, 2026
CVE-2022-38202
CVE-2022-38202
Description
There is a path traversal vulnerability in Esri ArcGIS Server versions 10.9.1 and below. Successful exploitation may allow a remote, unauthenticated attacker traverse the file system to access files outside of the intended directory on ArcGIS Server. This could lead to the disclosure of sensitive site configuration information (not user datasets).
Affected products
3cpe:2.3:a:esri:arcgis_server:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:esri:arcgis_server:*:*:*:*:*:*:*:*range: <=10.9.1
- (no CPE)range: <=10.9.1
- (no CPE)range: 11.0
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.