Security Advisory

CVE-2021-29102

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-07-11 01:28:15
Last updated 2025-04-10 15:00:22
Assigner Esri
State PUBLISHED

Description

A Server-Side Request Forgery (SSRF) vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote, unauthenticated attacker to forge GET requests to arbitrary URLs from the system, potentially leading to network enumeration or facilitating other attacks.