laptop and a wrench

Bug

There is a SQL injection vulnerability in ArcGIS Server.

Last Published: November 13, 2020 ArcGIS GIS Server
Bug ID Number BUG-000134965
SubmittedOctober 28, 2020
Last ModifiedMay 31, 2023
Applies toArcGIS GIS Server
Version found10.8.1
Operating SystemN/A
Operating System VersionN/A
Version Fixed10.9
StatusFixed

Workaround

The ArcGIS Server Map and Feature Service Security Patch is now live on the support site. The URL is:

https://support.esri.com/en/download/7873

Steps to Reproduce

Bug ID: BUG-000134965

Software:

  • ArcGIS GIS Server

Get help from ArcGIS experts

Contact technical support

Download the Esri Support App

Go to download options

Discover more on this topic

Esri Community

Search for related information

Training

Find training related to this topic

ArcGIS Ideas

Explore ideas and give feedback