Esri Arcsde vulnerabilities

2 CVEs affecting Esri Arcsde, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-4278, published 2007-08-15.

More from Esri.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2007-1770, published 2007-03-30. High severity, CVSS 10.0. EPSS: 16.8% chance of exploitation in the next 30 days. Buffer overflow in the ArcSDE service (giomgr) in Environmental Systems Research Institute (ESRI) ArcGIS before 9.2 Service Pack 2, when using three tiered ArcSDE configurations, allows remote…
• CVE-2007-4278, published 2007-08-15. High severity, CVSS 7.5. EPSS: 4.7% chance of exploitation in the next 30 days. Stack-based buffer overflow in the giomgr process in ESRI ArcSDE service 9.2, as used with ArcGIS, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via…