CVE-2025-57870
|
| |
|
|
Software afectado |
KUBERNETES |
|
|
|
A SQL Injection vulnerability exists in Esri ArcGIS Server versions 11.3, 11.4 and 11.5 on Windows, Linux and Kubernetes. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary SQL commands via a specific ArcGIS Feature Service operation. Successful exploitation can potentially result in unauthorized access, modification, or deletion of data from the underlying Enterprise Geodatabase. |
Link: |
| https://nvd.nist.gov/vuln/detail/CVE-2025-57870 |
