CVE-2013-7232

SQL injection vulnerability in ESRI ArcGIS for Server through 10.2 allows remote attackers to execute arbitrary SQL commands via unspecified input to the map or feature service.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2013-12-30

Last modified

2024-09-16

Weaknesses

CWE-89

Affected products

• Arcgis Server (Esri)

References

• http://support.esri.com/en/downloads/patches-servicepacks/view/productid/66/metaid/2009