CVE-2024-51962

Summary

CVE-2024-51962 is a SQL injection vulnerability affecting ArcGIS Server. This issue allows an authenticated user with elevated, non-admin privileges to execute SQL injection during an EDIT operation, impacting both integrity and confidentiality of the data without affecting availability. By manipulating Column properties, malicious users can introduce malicious SQL statements, leading to unintended data modifications or exposure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.