Esri Arcgis Allsource vulnerabilities
2 vulnerabilities
Known vulnerabilities in Esri Arcgis Allsource, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-1067esri · arcgis_allsource +1 moreThere is a code injection vulnerability in ArcGIS ProThere is an untrusted search path vulnerability in Esri ArcGIS Pro 3.3 and 3.4 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem. When the victim performs a specific action using ArcGIS ArcGIS Pro, the file could execute and run malicious commands under the context of the victim. This issue is addressed in ArcGIS Pro 3.3.3 and 3.4.1.EPSS0.19%HighCVE-2025-1068esri · arcgis_allsource +1 moreThere is a code injection vulnerability in Esri ArcGIS AllSourceThere is an untrusted search path vulnerability in Esri ArcGIS AllSource 1.2 and 1.3 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem. When the victim performs a specific action using ArcGIS AllSource, the file could execute and run malicious commands under the context of the victim. This issue is corrected in ArcGIS AllSource 1.2.1 and 1.3.1.EPSS0.22%