CVE-2021-29115

—

CVSS 3.1

5.3 medium

EPSS

2%p81

Published

Dec 7, 2021 (Dec 7, 2021)

Modified

Jun 17, 2026

Description

An information disclosure vulnerability in the ArcGIS Service Directory in Esri ArcGIS Enterprise versions 10.9.0 and below may allows a remote attacker to view hidden field names in feature layers. This issue may reveal field names, but not not disclose features.

Vendors: esri
Products: arcgis enterprise
Weakness: CWE-200, CWE-668
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news0 stories

No ingested article mentions this CVE yet.