CVE-2021-29101: Esri Arcgis Geoevent Server

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

ArcGIS GeoEvent Server versions 10.8.1 and below has a read-only directory path traversal vulnerability that could allow an unauthenticated, remote attacker to perform directory traversal attacks and read arbitrary files on the system.

Affected products

• Esri Arcgis Geoevent Server: up to and including 10.8.1

Published 2021-05-05. Last modified 2026-06-17.