CVE-2023-25848 — BUG-000158039 - There is an information disclosure issue in ArcGIS Server.
ArcGIS Enterprise Server versions 11.0 and below have an information disclosure vulnerability where a remote, unauthorized attacker may submit a crafted query that may result in…
Published: 2023-08-25 · CVSS: 5.3 · CVSS 3.1
ArcGIS Enterprise Server versions 11.0 and below have an information disclosure vulnerability where a remote, unauthorized attacker may submit a crafted query that may result in a low severity information disclosure issue. The information disclosed is limited to a single attribute in a database connection string. No business data is disclosed.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7