CVE-2013-5221
The mobile-upload feature in Esri ArcGIS for Server 10.1 through 10.2 allows remote authenticated users to upload .exe files by leveraging (1) publisher or (2) administrator privileges.
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- esri:arcgis_server
References
- http://support.esri.com/en/downloads/patches-servicepacks/view/productid/66/metaid/2009
- http://support.esri.com/en/knowledgebase/techarticles/detail/41497
- http://support.esri.com/en/downloads/patches-servicepacks/view/productid/66/metaid/2009
- http://support.esri.com/en/knowledgebase/techarticles/detail/41497