Approved changes feed: RSS · Atom

cpe:2.3:a:esri:arcgis_insights:2022.1:*:*:*:*:arcgis_enterprise:*:*

part: a version: 2022.1 update: *

VendorEsri (7fc7b1c4-e95b-5bc9-bfb4-4695cd2e3e82)
ProductArcgis Insights (251caf8b-6b1c-51bd-8ad6-51bb2aa0059e)
Edition*
Language*
Software edition*
Target softwarearcgis_enterprise
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/esri/insights-scripting-guide purl2cpe 2026-06-01 10:13:10.399459

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-25839 vulnerable 2026-06-03 14:49:34.227486 BUG-000157278 – ArcGIS Insights has a security vulnerability - desktop
HIGH (7)
There is SQL injection vulnerability in Esri ArcGIS Insights Desktop for Mac and Windows version 2022.1 that may allow a local, authorized attacker to execute arbitrary SQL commands against the back-end database. The effort required to generate the crafted input required to exploit this issue is complex and requires significant effort before a successful attack can be expected.
Published: 2023-07-19T15:45:47.077Z
Updated: 2024-10-25T18:52:54.067Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.