laptop and a wrench


There is a SQL injection vulnerability in ArcGIS Server.

Last Published: November 13, 2020 ArcGIS GIS Server
Bug ID Number BUG-000134965
SubmittedOctober 28, 2020
Last ModifiedMay 31, 2023
Applies toArcGIS GIS Server
Version found10.8.1
Operating SystemN/A
Operating System VersionN/A
Version Fixed10.9


The ArcGIS Server Map and Feature Service Security Patch is now live on the support site. The URL is:

Steps to Reproduce

Bug ID: BUG-000134965


  • ArcGIS GIS Server

Get help from ArcGIS experts

Contact technical support

Download the Esri Support App

Go to download options

Discover more on this topic