Skip to main content

Arcgis Server CVE-2013-5221

LOW
2013-09-24 cve@mitre.org
3.5
CVSS 2.0 · NVD

Severity by source

NVD PRIMARY
3.5 LOW
AV:N/AC:M/Au:S/C:N/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:S/C:N/I:P/A:N
Attack Vector
Network
Attack Complexity
M
Confidentiality
None
Integrity
P
Availability
None

Lifecycle Timeline

1
CVE Published
Sep 24, 2013 - 10:35 cve.org
LOW 3.5

DescriptionCVE.org

The mobile-upload feature in Esri ArcGIS for Server 10.1 through 10.2 allows remote authenticated users to upload .exe files by leveraging (1) publisher or (2) administrator privileges.

AnalysisAI

The mobile-upload feature in Esri ArcGIS for Server 10.1 through 10.2 allows remote authenticated users to upload .exe files by leveraging (1) publisher or (2) administrator privileges. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable.

Technical ContextAI

The mobile-upload feature in Esri ArcGIS for Server 10.1 through 10.2 allows remote authenticated users to upload .exe files by leveraging (1) publisher or (2) administrator privileges. Affected products include: Esri Arcgis Server. Version information: through 10.2.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2012-4949 MEDIUM POC
6.5 Nov 14

SQL injection vulnerability in ESRI ArcGIS 10.1 allows remote authenticated users to execute arbitrary SQL commands via

CVE-2021-29114 CRITICAL
9.8 Dec 07

A SQL injection vulnerability in feature services provided by Esri ArcGIS Server 10.9 and below allows a remote, unauthe

CVE-2020-35712 CRITICAL
9.8 Dec 26

Esri ArcGIS Server before 10.8 is vulnerable to SSRF in some configurations. Rated critical severity (CVSS 9.8), this vu

CVE-2021-29102 CRITICAL
9.1 Jul 11

A Server-Side Request Forgery (SSRF) vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote,

CVE-2024-51962 HIGH
8.7 Mar 03

A SQL injection vulnerability in ArcGIS Server allows an EDIT operation to modify column properties in a manner that cou

CVE-2024-51954 HIGH
8.5 Mar 03

There is an improper access control issue in ArcGIS Server versions 11.3 and below on Windows and Linux which, under uni

CVE-2022-38196 HIGH
8.1 Oct 25

Esri ArcGIS Server versions 10.9.1 and prior have a path traversal vulnerability that may result in a denial of service

CVE-2026-9181 HIGH
7.5 Jul 06

Unauthenticated file disclosure in Esri ArcGIS Server (all versions 12.0 and prior) lets remote attackers read sensitive

CVE-2013-7232 HIGH
7.5 Dec 30

SQL injection vulnerability in ESRI ArcGIS for Server through 10.2 allows remote attackers to execute arbitrary SQL comm

CVE-2024-51961 HIGH
7.5 Mar 03

There is a local file inclusion vulnerability in ArcGIS Server 11.3 and below that may allow a remote, unauthenticated a

CVE-2022-38202 HIGH
7.5 Dec 28

There is a path traversal vulnerability in Esri ArcGIS Server versions 10.9.1 and below. Rated high severity (CVSS 7.5),

CVE-2026-9182 CRITICAL
9.8 Jul 06

Unrestricted file upload in Esri ArcGIS Server (all versions through 12.0) lets a remote, unauthenticated attacker push

Share

CVE-2013-5221 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy