CVE-2013-7232: SQL Injection
Published Dec 30, 2013
·Updated
SQL injection vulnerability in ESRI ArcGIS for Server through 10.2 allows remote attackers to execute arbitrary SQL commands via unspecified input to the map or feature service.
Affected Software
3 affected components
Esri ArcGIS<=10.2
Esri ArcGIS=10.1
Esri ArcGIS Server<=10.2
Event History
Dec 30, 2013
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Data Sourced
via NVD·04:53 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-7232?
CVE-2013-7232 is classified as a high-severity SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2013-7232?
To fix CVE-2013-7232, update ESRI ArcGIS and ArcGIS Server to the latest versions beyond 10.2.
3
What software versions are affected by CVE-2013-7232?
CVE-2013-7232 affects Esri ArcGIS versions up to 10.2 and specifically version 10.1 of Esri ArcGIS.
4
Can CVE-2013-7232 be exploited remotely?
Yes, CVE-2013-7232 can be exploited remotely, allowing attackers to send malicious SQL commands to the server.
5
What are the potential consequences of exploiting CVE-2013-7232?
Exploitation of CVE-2013-7232 could lead to unauthorized data manipulation, disclosure, and serious breaches in database integrity.