CVE-2025-57870
SQL injection in Esri Arcgis Server
CVSS score
10.0
EPSS probability
%0.5
Risk score
0.1
Published
1 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Esri ArcGIS Server (★1)
Makefile Go / Python
Similar Vulnerabilities
10.0
CVE-2020-0796 Actively exploitedMemory buffer overflow in Microsoft Windows 10 Version 1903 For 32 Bit Systems
Patch verified Public Exploits:14EPSS %100
9.8
CVE-2025-53770 Actively exploitedMicrosoft SharePoint Server Remote Code Execution Vulnerability
Patch verified Public Exploits:12EPSS %100
9.8
CVE-2025-59287 Actively exploitedWindows Server Update Service (WSUS) Remote Code Execution Vulnerability
Patch verified Public Exploits:10EPSS %100
9.8
CVE-2021-38647 Actively exploitedOpen Management Infrastructure (OMI) Remote Code Execution Vulnerability
Patch verified Public Exploits:10EPSS %100
9.8
CVE-2022-30333 Actively exploitedPath traversal in N/a
Patch verifiedEPSS %99
9.8
CVE-2024-21413 Actively exploitedMicrosoft Outlook Remote Code Execution Vulnerability
Patch verified Public Exploits:7EPSS %95
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-57870"