CVE-2012-4949

SQL injection vulnerability in ESRI ArcGIS 10.1 allows remote authenticated users to execute arbitrary SQL commands via the where parameter to a query URI for…

published November 14, 2012

CVSS
—
EPSS
4%
Percentile
91.2
In the wild
Unconfirmed
What it is

SQL injection vulnerability in ESRI ArcGIS 10.1 allows remote authenticated users to execute arbitrary SQL commands via the where parameter to a query URI for a REST service.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04388 · 91.2th percentile
Published
2012-11-14T11:00Z
EPSS history
Timeline
  • 14 NOV 11:00Z
    SQL injection vulnerability in ESRI ArcGIS 10.1 allows remote authenticated users to execute arbitrary SQL commands via the where parameter to a query URI for…
    cvelistv5