<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]-->
<title>Esri Software Alert: Security Issue in ArcGIS Server</title>
<style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:black;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:black;
text-decoration:underline;}
p
{mso-style-priority:99;
margin-top:12.0pt;
margin-right:0in;
margin-bottom:12.0pt;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.body, li.body, div.body
{mso-style-name:body;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.externalclass, li.externalclass, div.externalclass
{mso-style-name:externalclass;
margin-top:12.0pt;
margin-right:0in;
margin-bottom:12.0pt;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.original-only, li.original-only, div.original-only
{mso-style-name:original-only;
margin-top:12.0pt;
margin-right:0in;
margin-bottom:12.0pt;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.original-only1, li.original-only1, div.original-only1
{mso-style-name:original-only1;
margin-top:12.0pt;
margin-right:0in;
margin-bottom:12.0pt;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;
display:none;}
p.original-only2, li.original-only2, div.original-only2
{mso-style-name:original-only2;
margin-top:12.0pt;
margin-right:0in;
margin-bottom:12.0pt;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;
display:none;}
p.original-only3, li.original-only3, div.original-only3
{mso-style-name:original-only3;
margin-top:12.0pt;
margin-right:0in;
margin-bottom:12.0pt;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;
display:none;}
p.original-only4, li.original-only4, div.original-only4
{mso-style-name:original-only4;
margin-top:12.0pt;
margin-right:0in;
margin-bottom:12.0pt;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;
display:none;}
span.EmailStyle26
{mso-style-type:personal-reply;
font-family:"Arial",sans-serif;
color:#44546A;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor="#F2F2F2" lang="EN-US" link="black" vlink="black">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#44546A">FYI for those with ArcGIS Server.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#44546A"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#1F4E79">=============================<br>
David Mather, GISP<br>
Geospatial Data Administrator<br>
Geospatial Enterprise Office<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#1F4E79">Office of the State CIO</span><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#1F4E79"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#1F4E79">635 Capitol st NE # 150</span><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#1F4E79"><br>
Salem, OR 97301<br>
503-378-2166<br>
gis.oregon.gov<br>
=============================<br>
Data Classification: Level 1 - Published<br>
</span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F4E79">
<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#44546A"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Esri [mailto:newsletter@esri.com]
<br>
<b>Sent:</b> Monday, May 14, 2018 10:49 AM<br>
<b>To:</b> david.mather@state.or.us<br>
<b>Subject:</b> Esri Software Alert: Security Issue in ArcGIS Server<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div align="center">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;background:#F2F2F2;border-collapse:collapse">
<tbody>
<tr>
<td style="padding:0in 0in 0in 0in">
<p class="MsoNormal" style="mso-line-height-alt:.75pt"><span style="font-size:1.0pt;color:white">Critical Patch Released<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td valign="top" style="padding:15.0pt 15.0pt 15.0pt 15.0pt;-webkit-text-size-adjust: 100%;-ms-text-size-adjust: 100%" id="bodyCell">
<div align="center">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="0" style="width:6.25in;border-collapse:collapse;-webkit-text-size-adjust: 100%;-ms-text-size-adjust: 100%" id="templateContainer">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in;-webkit-text-size-adjust: 100%;-ms-text-size-adjust: 100%">
<div align="center">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;background:#F2F2F2;border-collapse:collapse;-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100%" id="templatePreheader">
<tbody>
<tr>
<td width="40%" valign="top" style="width:40.0%;padding:3.75pt 3.75pt 3.75pt 3.75pt;-webkit-text-size-adjust: 100%;-ms-text-size-adjust: 100%">
<p class="MsoNormal" style="mso-line-height-alt:3.75pt"><span style="font-size:4.0pt;font-family:"Helvetica",sans-serif;color:#F2F2F2"><img id="logoImage" src="http://www.esri.com/~/media/9F018649AF1C478A8DB46D860CCCB996" alt="Esri | The Science of Where"><o:p></o:p></span></p>
</td>
<td width="71%" valign="top" style="width:71.0%;padding:18.75pt 7.5pt 3.75pt 0in;-webkit-text-size-adjust: 100%;-ms-text-size-adjust: 100%">
<p class="MsoNormal" align="right" style="text-align:right;line-height:9.75pt"><span style="font-size:8.5pt;font-family:"Arial",sans-serif;color:#999999">View email in
<a href="https://go.esri.com/webmail/82202/557023028/0ec2d4395583997389b5ce975eb6a525">
<span style="color:#999999">web browser</span></a><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</div>
</td>
</tr>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in;-webkit-text-size-adjust: 100%;-ms-text-size-adjust: 100%">
<div align="center">
<table class="MsoNormalTable" border="1" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;background:white;border-collapse:collapse;border:none;-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100%" id="templateBody">
<tbody>
<tr>
<td valign="top" style="border:solid #E3E3E3 1.0pt;border-top:none;padding:15.0pt 15.0pt 15.0pt 15.0pt;-webkit-text-size-adjust: 100%;-ms-text-size-adjust: 100%">
<div>
<p style="margin:0in;margin-bottom:.0001pt;line-height:19.5pt"><span style="font-size:18.0pt;font-family:"Arial",sans-serif;color:#222222">Security Issue in ArcGIS Server<o:p></o:p></span></p>
</div>
<div>
<p style="line-height:15.75pt"><span style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#505050">Esri has discovered a critical vulnerability in ArcGIS Server causing improper access control validation when specially crafted requests are sent
to the server. This results in secured services and their data to be exposed to users when they should not otherwise have access.<br>
<br>
This security issue affects all supported versions of ArcGIS Server on both Windows and Linux. As an ArcGIS Enterprise customer, we are personally notifying you about this security vulnerability in addition to regular online notifications on our blog and security
site at <a href="https://go.esri.com/e/82202/2018-05-14/kx1cq5/557023028">Trust.ArcGIS.com</a>.<br>
<br>
<strong><span style="font-family:"Helvetica",sans-serif">What You Need to Do</span></strong><br>
Patches for all versions of ArcGIS Server from 10.2.1 through 10.6 have been released. Esri strongly recommends installing the relevant patch at your earliest possible opportunity.<br>
<br>
All patches can be downloaded from the <a href="https://go.esri.com/e/82202/rver-Enterprise-Software-Alert/kx1cpp/557023028">
Esri Support website</a>.<br>
<br>
<strong><span style="font-family:"Helvetica",sans-serif">More Information</span></strong><br>
For more details, please refer to the Knowledge Base article, <a href="https://go.esri.com/e/82202/rver-Enterprise-Software-Alert/kx1cpr/557023028">
Problem: Warning of security vulnerability in ArcGIS Server</a>. <br>
<br>
We also encourage you to subscribe to the RSS feed on <a href="https://go.esri.com/e/82202/2018-05-14/kx1cq5/557023028">
Trust.ArcGIS.com</a> for future updates on this and other security issues.<o:p></o:p></span></p>
</div>
</td>
</tr>
</tbody>
</table>
</div>
</td>
</tr>
<tr>
<td valign="top" style="background:#F2F2F2;padding:0in 0in 0in 0in;-webkit-text-size-adjust: 100%;-ms-text-size-adjust: 100%">
<div align="center">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;background:#F2F2F2;border-collapse:collapse;-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100%" id="templateColumns">
<tbody>
<tr>
<td width="68%" valign="top" style="width:68.0%;padding:15.0pt 0in 0in 0in;-webkit-text-size-adjust: 100%;-ms-text-size-adjust: 100%">
<div align="center">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;border-collapse:collapse;-webkit-text-size-adjust: 100%;-ms-text-size-adjust: 100%">
<tbody>
<tr>
<td style="background:#F2F2F2;padding:3.75pt 15.0pt 7.5pt 1.5pt;-webkit-text-size-adjust: 100%;-ms-text-size-adjust: 100%">
<div>
<p class="MsoNormal" style="line-height:11.25pt"><span style="font-size:7.5pt;font-family:"Arial",sans-serif;color:#999999">You received this due to your interest in Esri subscriptions.<o:p></o:p></span></p>
</div>
<p class="MsoNormal" style="line-height:11.25pt"><span style="font-size:7.5pt;font-family:"Arial",sans-serif;color:#999999"><a href="https://go.esri.com/preferences?ehash=0ec2d4395583997389b5ce975eb6a525&email_id=557023028"><span style="color:#999999">Update</span></a>
your subscription preferences. <o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="line-height:11.25pt"><span style="font-size:7.5pt;font-family:"Arial",sans-serif;color:#999999"><a href="https://go.esri.com/e/82202/2018-05-14/kx1cq7/557023028"><span style="color:#999999">Esri.com</span></a> |
<a href="https://go.esri.com/e/82202/rver-Enterprise-Software-Alert/kx1cq9/557023028">
<span style="color:#999999">Privacy</span></a> | <a href="https://go.esri.com/e/82202/rver-Enterprise-Software-Alert/kx1cqc/557023028">
<span style="color:#999999">Contact Us</span></a><o:p></o:p></span></p>
</div>
<p class="MsoNormal" style="line-height:11.25pt"><span style="font-size:7.5pt;font-family:"Arial",sans-serif;color:#999999">Copyright © 2018 Esri. All rights reserved.<br>
Esri, 380 New York Street, Redlands, CA 92373, USA.<o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</div>
</td>
<td width="32%" valign="top" style="width:32.0%;padding:15.0pt 0in 0in 0in;-webkit-text-size-adjust: 100%;-ms-text-size-adjust: 100%">
<div align="right">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;border-collapse:collapse;-webkit-text-size-adjust: 100%;-ms-text-size-adjust: 100%">
<tbody>
<tr>
<td style="background:#F2F2F2;padding:3.75pt 0in 0in 0in;-webkit-text-size-adjust: 100%;-ms-text-size-adjust: 100%">
<p class="MsoNormal" style="line-height:11.25pt"><span style="font-size:7.5pt;font-family:"Helvetica",sans-serif;color:#4D4D4D"><a href="https://go.esri.com/e/82202/esrigis/kx1cpt/557023028"><span style="text-decoration:none"><img border="0" id="FooterImage1" src="http://www.esri.com/~/media/B245703802084DFA910643E34CA4A76D" alt="Facebook"></span></a><a href="https://go.esri.com/e/82202/esrigram-/kx1cpw/557023028"><span style="text-decoration:none"><img border="0" id="FooterImage2" src="http://www.esri.com/~/media/AB0B988E36EC410A98269CA9008BC136" alt="Instagram"></span></a><a href="https://go.esri.com/e/82202/company-esri/kx1cpy/557023028"><span style="text-decoration:none"><img border="0" id="FooterImage3" src="http://www.esri.com/~/media/FDFBAAA2720045899B40B1B590998CB4" alt="LinkedIn"></span></a><a href="https://go.esri.com/e/82202/esri/kx1cq1/557023028"><span style="text-decoration:none"><img border="0" id="FooterImage4" src="http://www.esri.com/~/media/C209FDACAB3643349F2FB29D970D3242" alt="Twitter"></span></a><a href="https://go.esri.com/e/82202/esri-posts/kx1cq3/557023028"><span style="text-decoration:none"><img border="0" id="_x0000_i1030" src="http://www.esri.com/~/media/671246B9F22B4000805E7F5C75A70DB6" alt="Google+"></span></a><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</div>
</td>
</tr>
</tbody>
</table>
</div>
</td>
</tr>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in;-webkit-text-size-adjust: 100%;-ms-text-size-adjust: 100%">
<p class="MsoNormal" align="center" style="text-align:center"> <o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
</div>
</td>
</tr>
</tbody>
</table>
</div>
<p class="MsoNormal"><img border="0" id="_x0000_i1031" src="https://go.esri.com/r/82202/1/557023028/open/1"><o:p></o:p></p>
<p class="MsoNormal"><img border="0" width="1" height="1" id="_x0000_i1032" src="https://iwvuk3es.emltrk.com/iwvuk3es"><o:p></o:p></p>
</div>
</body>
</html>