Login Request a demo
AS
Product
ArcGIS Server
by Esri · last CVE Oct 26, 2026
75
CVEs
0
On KEV
10.0
Max CVSS
6
New 30D
Vulnerabilities75In the news0Timeline
Severity mix
Critical 6High 7Medium 53Low 1
Severity
All severities75Critical6High7Medium53Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add ArcGIS Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-57870
10.0
1%
Oct 22
BUG-000179884 - There is a security vulnerability in ArcGIS Server Feature Services.
Affected: 11.3 through 11.5
CVE-2026-10757
New
9.8
0%
Oct 26
BUG-000187511 - ArcGIS Server has a security vulnerability.
Affected: 11.1 before 12.1
CVE-2026-9182
9.8
1%
Jul 6
Unvalidated File Upload vulnerability in ArcGIS Server.
Affected: through 12.0
CVE-2021-29114
9.8
1%
Dec 7
A SQL injection vulnerability in feature services provided by Esri ArcGIS Server 10.9 and below allows a remote, unauthenticated attacker to impact the confidentiality, integrity…
Affected: through 10.9.0
CVE-2020-35712
9.8
2%
Dec 26
Esri ArcGIS Server before 10.8 is vulnerable to SSRF in some configurations
Affected: before 10.8
CVE-2021-29102
9.1
2%
Jul 11
A Server-Side Request Forgery (SSRF) vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote, unauthenticated attacker to forge GET requests to…
Affected: before 10.9.0
Showing 6