Approved changes feed: RSS · Atom

cpe:2.3:a:esri:arcgis_insights:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEsri (7fc7b1c4-e95b-5bc9-bfb4-4695cd2e3e82)
ProductArcgis Insights (251caf8b-6b1c-51bd-8ad6-51bb2aa0059e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/esri/insights-scripting-guide purl2cpe 2026-06-01 10:13:10.399458

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-25839 vulnerable 2026-06-03 14:49:34.227541 BUG-000157278 – ArcGIS Insights has a security vulnerability - desktop
HIGH (7)
There is SQL injection vulnerability in Esri ArcGIS Insights Desktop for Mac and Windows version 2022.1 that may allow a local, authorized attacker to execute arbitrary SQL commands against the back-end database. The effort required to generate the crafted input required to exploit this issue is complex and requires significant effort before a successful attack can be expected.
Published: 2023-07-19T15:45:47.077Z
Updated: 2024-10-25T18:52:54.067Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25838 vulnerable 2026-06-03 14:49:34.225295 BUG-000157278 – ArcGIS Insights has a security vulnerability.
HIGH (7.5)
There is SQL injection vulnerability in Esri ArcGIS Insights 2022.1 for ArcGIS Enterprise and that may allow a remote, authorized attacker to execute arbitrary SQL commands against the back-end database. The effort required to generate the crafted input required to exploit this issue is complex and requires significant effort before a successful attack can be expected.
Published: 2023-07-19T15:37:14.946Z
Updated: 2024-10-28T15:14:38.760Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.