SQL Injection

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

1. SQL injection vulnerability in ESRI ArcGIS 10.1 allows remote authenticated users to execute arbitrary SQL commands via the where parameter to a query URI for a REST service.CVE-2012-4949Esri · 4.4% likely

   CWE-89

2. SQL injection vulnerability in ESRI ArcGIS for Server through 10.2 allows remote attackers to execute arbitrary SQL commands via unspecified input to the map or feature service.CVE-2013-7232Esri · 2.3% likely

   CWE-89

3. SQL injection vulnerability in ArcGIS ServerCVE-2021-29114Esri · CVSS 7.3 · 1.0% likely

   CWE-89

4. BUG-000157278 – ArcGIS Insights has a security vulnerability.CVE-2023-25838Esri · CVSS 7.5 · 0.7% likely

   CWE-89

5. There is a SQL injection vulnerability in ArcGIS ServerCVE-2021-29099Esri · CVSS 5.3 · 0.6% likely

   CWE-89

6. BUG-000179884 - There is a security vulnerability in ArcGIS Server Feature Services.CVE-2025-57870Esri · CVSS 10 · 0.5% likely

   CWE-89

7. SQL injection vulnerability in ArcGIS ServerCVE-2024-51962Esri · CVSS 8.7 · 0.5% likely

   CWE-89

8. BUG-000187511 - ArcGIS Server has a security vulnerability.CVE-2026-10757Esri · CVSS 9.8 · 0.4% likely

   CWE-89

9. [#BUG-000172669 ArcGIS Monitor has a security vulnerability]CVE-2025-1726Esri · CVSS 4.3 · 0.4% likely

   CWE-89

10. BUG-000157278 – ArcGIS Insights has a security vulnerability - desktopCVE-2023-25839Esri · CVSS 7 · 0.2% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.