Esri Portal for ArcGIS

• CVE-2026-69226 Medium 6.5 Portal for ArcGIS has a security vulnerability 0.2%
• CVE-2026-10759 Medium 5.5 BUG-000171040 Portal for ArcGIS has a security vulnerability 0.2%
• CVE-2026-69227 Critical 9.8 BUG-000187331 Portal for ArcGIS has a security vulnerability 0.4%
• CVE-2026-69233 Medium 5.5 stored cross site scripting issue in Esri Portal for ArcGIS 0.3%
• CVE-2026-69234 Medium 6.1 reflected cross site scripting vulnerability in Esri Portal for ArcGIS 0.3%
• CVE-2026-69235 Medium 6.1 stored cross site scripting issue in Esri Portal for ArcGIS 0.3%
• CVE-2026-69236 Medium 6.1 stored cross site scripting issue in Esri Portal for ArcGIS 0.3%
• CVE-2026-69237 Low 3.8 HTML injection vulnerability in Esri Portal for ArcGIS 0.3%
• CVE-2026-69232 Medium 5.5 stored cross site scripting issue in Esri Portal for ArcGIS 0.3%
• CVE-2026-69231 Medium 5.5 stored cross site scripting issue in Esri Portal for ArcGIS 0.3%
• CVE-2026-69230 Medium 5.5 stored cross site scripting issue in Esri Portal for ArcGIS 0.2%
• CVE-2026-69229 Medium 5.4 HTML injection vulnerability in Esri Portal for ArcGIS 0.3%
• CVE-2026-69228 Medium 5.3 missing authentication vulnerability in Esri Portal for ArcGIS 0.5%
• CVE-2026-69225 Medium 5.9 information disclosure vulnerability in Esri Portal for ArcGIS 0.5%
• CVE-2026-69238 Low 3.5 HTML injection vulnerability in Esri Portal for ArcGIS 0.2%
• CVE-2026-69224 Medium 5.9 information disclosure vulnerability in Esri Portal for ArcGIS 0.5%
• CVE-2026-13019 Critical 9.8 Missing Authentication 0.8%
• CVE-2026-13020 High 8.1 Weak Password Recovery Mechanism in Portal for ArcGIS 0.5%
• CVE-2026-33519 Critical 9.8 Incorrect privilege assignment in Portal for ArcGIS 0.3%
• CVE-2026-33518 Critical 9.8 Incorrect privilege assignment in Portal for ArcGIS 0.3%
• CVE-2025-57871 Medium 4.8 BUG-000174020 - Reflected XSS vulnerability identified in Portal for ArcGIS. (11.3, 11.1, 10.9.1) 0.2%
• CVE-2025-57872 Medium 6.1 BUG-000174150 - Unvalidated redirect in Portal for ArcGIS. 0.2%
• CVE-2025-57873 Medium 4.8 BUG-000175222 - Reflected XSS vulnerability in Portal for ArcGIS. 0.2%
• CVE-2025-57874 Medium 4.8 BUG-000161627 - Reflected XSS vulnerability in Portal for ArcGIS.  (11.3, 11.1, 10.9.1) 0.2%
• CVE-2025-57875 Medium 4.8 BUG-000164122 - Reflected XSS vulnerability in Portal for ArcGIS. 0.2%
• CVE-2025-57877 Medium 4.8 Reflected XSS vulnerability in Portal for ArcGIS. 0.2%
• CVE-2025-57878 Medium 6.1 BUG-000174149 - The Portal for ArcGIS has an unvalidated redirect. 0.2%
• CVE-2025-57879 Medium 6.1 BUG-000171009 - URL manipulation vulnerability in Portal for ArcGIS. 0.2%
• CVE-2025-57876 Medium 4.8 Stored XSS vulnerability in Portal for ArcGIS 0.2%
• CVE-2025-4967 Critical 9.1 Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS 0.6%
• CVE-2025-2538 Critical 9.8 BUG-000174336 0.6%
• CVE-2024-38040 High 7.5 BUG-000167984 - Portal for ArcGIS has a Local file inclusion (LFI) vulnerability 0.5%
• CVE-2024-38038 Medium 6.1 BUG-000165732 - Reflected XSS in Portal for ArcGIS 0.3%
• CVE-2024-25691 Medium 6.1 BUG-000165286 - Reflected XSS in Portal for ArcGIS 0.3%
• CVE-2024-25707 Medium 4.8 BUG-000160241 - Reflected XSS in Portal for ArcGIS 0.4%
• CVE-2024-8149 Medium 4.6 BUG-000168624 - Unvalidated redirect in Portal for ArcGIS. 0.4%
• CVE-2024-38039 Medium 5.4 BUG-000161683 - HTML injection vulnerability in Portal for ArcGIS. 0.3%
• CVE-2024-8148 Medium 6.1 BUG-000168624 - Unvalidated redirect in Portal for ArcGIS. (11.2, 11.1, 10.9.1. and 10.8.1) 0.3%
• CVE-2024-38037 Medium 6.1 BUG-000167983 - Unvalidated redirect in Portal for ArcGIS 0.3%
• CVE-2024-25699 High 8.5 Portal for ArcGIS has an invalid authentication vulnerability 0.7%
• CVE-2024-25705 Medium 5.4 Cross site scripting issue in embed widget 0.5%
• CVE-2024-25706 Medium 6.1 HTMLi at createFolder Content Injection 0.4%
• CVE-2024-25709 Medium 6.1 Self-XSS style in move item dialog 0.4%
• CVE-2024-25698 Medium 6.1 Reflected XSS in Portal for ArcGIS 0.4%
• CVE-2024-25693 Critical 9.9 Portal for ArcGIS has a directory traversal vulnerability. 1.3%
• CVE-2024-25695 High 7.2 concatenated errors resulting in cross site scripting and frame injection issues. 0.5%
• CVE-2024-25696 Medium 4.8 Stored XSS in Portal for ArcGIS 0.4%
• CVE-2024-25697 Medium 5.4 Stored XSS in Portal for ArcGIS 0.4%
• CVE-2024-25692 Medium 5.4 BUG-000154722 - Cross-site request forgery (CSRF) issue in Portal for ArcGIS 0.2%
• CVE-2023-25833 Medium 5.4 BUG-000155004 HTML injection issue in Portal for ArcGIS. 0.4%