How many Esri arcmap CVEs are in CISA KEV?

None of Esri arcmap's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Esri arcmap vulnerabilities?

Yes — 1 of Esri arcmap's CVEs have a known public exploit.

Which versions of Esri arcmap are affected?

2 distinct Esri arcmap versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Esri arcmap CVEs?

Esri arcmap's CVEs most often map to these CWE weakness types: CWE-122 (Heap-based Buffer Overflow), CWE-416 (Use After Free), CWE-824 (Access of Uninitialized Pointer).

How many critical Esri arcmap vulnerabilities are there?

Esri arcmap has 1 critical and 3 high-severity CVEs.

What is the average severity of Esri arcmap CVEs?

The average CVSS base score across Esri arcmap's scored CVEs is 8.2.

Esri arcmap Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Esri arcmap vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Esri arcmap Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Esri arcmap has 4 published CVE records since 2012, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 8.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Esri arcmap, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Esri arcmap's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High3

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Esri arcmap's CVEs are currently listed in CISA's KEV catalog.

Public exploits

One of Esri arcmap's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every Esri arcmap version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 10.8.13 CVEs
<= 10.0.2.32001 CVE

Find a version

4 CVEs

Sort

High vulnerability · 2021-03-25
CVE-2021-29098
Patch
CWE-824
High · CVSS 7.8
EPSS 2.0% (79th pct)2021-03-25
High vulnerability · 2021-03-25
CVE-2021-29097
Patch
CWE-122
High · CVSS 7.8
EPSS 2.4% (83th pct)2021-03-25
High vulnerability · 2021-03-25
CVE-2021-29096
Patch
CWE-416
High · CVSS 7.8
EPSS 1.5% (73th pct)2021-03-25
Critical vulnerability · 2012-07-12
CVE-2012-1661
Public exploit
Critical · CVSS 9.3
EPSS 23.8% (98th pct)2012-07-12

Common weakness types

The CWE weakness categories most often found in Esri arcmap CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Esri arcmap CVEs were published each year.

2012

2021

Other Esri products

Browse vulnerabilities for other products by Esri.

Portal for ArcGIS88 CVEs arcgis server70 CVEs ArcGIS Enterprise13 CVEs arcgis pro6 CVEs arcreader6 CVEs Portal for ArcGIS Enterprise Sites5 CVEs ArcGIS Desktop3 CVEs ArcGIS Desktop Background Geoprocessing

Frequently asked questions

Common questions about Esri arcmap vulnerabilities.

How many CVEs does Esri arcmap have?: Esri arcmap has 4 published CVE records since 2012.
How many Esri arcmap CVEs are in CISA KEV?: None of Esri arcmap's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Esri arcmap vulnerabilities?: Yes — 1 of Esri arcmap's CVEs have a known public exploit.
Which versions of Esri arcmap are affected?: 2 distinct Esri arcmap versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Esri arcmap CVEs?: Esri arcmap's CVEs most often map to these CWE weakness types: CWE-122 (Heap-based Buffer Overflow), CWE-416 (Use After Free), CWE-824 (Access of Uninitialized Pointer).
How many critical Esri arcmap vulnerabilities are there?: Esri arcmap has 1 critical and 3 high-severity CVEs.
What is the average severity of Esri arcmap CVEs?: The average CVSS base score across Esri arcmap's scored CVEs is 8.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Esri arcmap vulnerabilities

Monitor new Esri arcmap vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing