{"id":2688632,"date":"2025-02-18T21:57:40","date_gmt":"2025-02-19T05:57:40","guid":{"rendered":"https:\/\/www.esri.com\/arcgis-blog\/?post_type=blog&p=2688632"},"modified":"2025-05-12T11:16:08","modified_gmt":"2025-05-12T18:16:08","slug":"arcgis-server-security-2025-update-1-patch","status":"publish","type":"blog","link":"https:\/\/www.esri.com\/arcgis-blog\/products\/trust-arcgis\/administration\/arcgis-server-security-2025-update-1-patch","title":{"rendered":"ArcGIS Server Security 2025 Update 1 Patch Released"},"author":136891,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","format":"standard","meta":{"_acf_changed":false,"_searchwp_excluded":""},"categories":[37501],"tags":[24081,759222,24071,241722],"industry":[],"product":[763582],"class_list":["post-2688632","blog","type-blog","status-publish","format-standard","hentry","category-administration","tag-ssamymlgp","tag-cve","tag-security","tag-ssamlymlgp","product-trust-arcgis"],"acf":{"authors":[{"ID":136891,"user_firstname":"Mark","user_lastname":"Bierman","nickname":"Mark Bierman","user_nicename":"mbierman","display_name":"Mark Bierman","user_email":"MBierman@esri.com","user_url":"","user_registered":"2020-12-08 21:10:04","user_description":"","user_avatar":""},{"ID":3911,"user_firstname":"Michael","user_lastname":"Young","nickname":"Michael Young","user_nicename":"myoung1000","display_name":"Michael Young","user_email":"myoung@esri.com","user_url":"http:\/\/trust.arcgis.com","user_registered":"2018-03-02 00:15:29","user_description":"","user_avatar":""},{"ID":5311,"user_firstname":"Randall","user_lastname":"Williams","nickname":"Randall Williams","user_nicename":"randallwilliams","display_name":"Randall Williams","user_email":"randall_williams@esri.com","user_url":"https:\/\/trust.arcgis.com","user_registered":"2018-03-02 00:17:03","user_description":"","user_avatar":""}],"short_description":"Esri has released the ArcGIS Server Security 2025 Update 1 Patch. Install this patch at your earliest convenience.","flexible_content":[{"acf_fc_layout":"sidebar","content":"

Key highlights<\/h4>\n

Esri has released Security Patches for ArcGIS Server.<\/h4>\n

These patches should be applied immediately to each ArcGIS Server machine (Windows or Linux) that participates in an ArcGIS Enterprise Site or Standalone deployment.<\/h4>\n

Users and System administrators: Take the time to install these patches at your earliest opportunity to address these vulnerabilities.<\/h4>\n","image_reference":false,"layout":"standard","image_reference_figure":"","snippet":"","spotlight_name":"","section_title":"","position":"Right","spotlight_image":false},{"acf_fc_layout":"content","content":"

Esri has released the ArcGIS Server Security 2025 Update 1 Patch. This patch resolves many high and medium severity security vulnerabilities across ArcGIS Server versions prior to 11.3.<\/p>\n

This patch was released on February 18th, 2025 and is available here<\/a>.<\/p>\n

We provide Common Vulnerability Scoring System (CVSS) v3.1 and v4.0 scores to allow our customers to better assess the risk of these vulnerabilities to their operations. Both base and temporally modified scores are provided to reflect the availability of an official patch.<\/p>\n

Vulnerabilities fixed by this patch include:<\/p>\n

 <\/p>\n

SQL Injection Vulnerability<\/p>\n