| |
Vulnerability CVE-2023-25848
Published: 2023-08-25
| Description: |
ArcGIS Enterprise Server versions 11.0 and below have an information disclosure vulnerability where a remote, unauthorized attacker may submit a crafted query that may result in a low severity information disclosure issue.
The information disclosed is limited to a single attribute in a database connection string. No business data is disclosed.
|
Type:
CWE-319 (Cleartext Transmission of Sensitive Information)
References: |
https://www.esri.com/arcgis-blog/products/trust-arcgis/announcements/arcgis-server-map-and-feature-service-security-2023-update-1-patch/
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
