Approved changes feed: RSS · Atom

cpe:2.3:a:esri:arcgis_server:10.6.1:*:*:*:*:*:x64:*

part: a version: 10.6.1 update: *

VendorEsri (7fc7b1c4-e95b-5bc9-bfb4-4695cd2e3e82)
ProductArcgis Server (4b5775bf-aef2-5392-b675-fe8157ab1e90)
Edition*
Language*
Software edition*
Target software*
Target hardwarex64
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-29107 vulnerable 2026-06-03 14:44:19.653708 There is a stored Cross Site Scripting (XXS) vulnerability in ArcGIS Server Manager version 10.8.1 and below.
MEDIUM (6.1)
A stored Cross Site Scripting (XXS) vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote unauthenticated attacker to pass and store malicious strings in the ArcGIS Server Manager application.
Published: 2021-07-10T14:23:45.846Z
Updated: 2025-04-10T15:00:53.604Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.