Unscored severity · published Aug 22, 2014
CVE-2014-5122
Open redirect vulnerability in ESRI ArcGIS for Server 10.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Open redirect vulnerability in ESRI ArcGIS for Server 10.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter, related to login.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Arcgis Server · Esri
10.1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-5122
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-5122
packetstormsecurity.com
http://packetstormsecurity.com/files/127959/ArcGIS-For-Server-10.1.1-XSS-Open-Redirect.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/533189/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/69341
www.securitytracker.com
http://www.securitytracker.com/id/1030752
More from Arcgis Server
10.0
CVE-2025-57870
BUG-000179884 - There is a security vulnerability in ArcGIS Server Feature Services.
9.8
CVE-2026-10757
BUG-000187511 - ArcGIS Server has a security vulnerability.
9.8
CVE-2026-9182
Unvalidated File Upload vulnerability in ArcGIS Server.
9.8
CVE-2021-29114
A SQL injection vulnerability in feature services provided by Esri ArcGIS Server 10.9 and below allows a remote, unauthenticated attacker to impact the confidentiality, integrity…
9.8
CVE-2020-35712
Esri ArcGIS Server before 10.8 is vulnerable to SSRF in some configurations