Esri Portal for ArcGIS

• CVE-2023-25831 Medium 6.1 BUG-000154236 There is a reflected cross-site scripting (XSS) vulnerability in Portal for ArcGIS. 0.5%
• CVE-2023-25830 Medium 6.1 BUG-000154662 Reflected XSS vulnerability in Portal for ArcGIS 0.5%
• CVE-2023-25829 Medium 6.1 BUG-000155001 - Unvalidated redirect in Portal for ArcGIS. 0.5%
• CVE-2023-25834 Medium 5.4 BUG-000142922 Incomplete permission changes in specific cases. 0.3%
• CVE-2023-25832 High 8.8 BUG-000148346 There is a Cross-Site Request Forgery (CSRF) vulnerability in Portal for ArcGIS. 0.3%
• CVE-2022-38203 High 7.5 The allowedProxyHosts property is not fully honored in ArcGIS Enterprise (10.8.1 and 10.7.1 only) 0.8%
• CVE-2022-38189 Medium 5.4 There is a stored cross-site scripting (XSS) vulnerability in ArcGIS API for JavaScript. 0.6%
• CVE-2022-38184 High 7.5 There is an improper access control vulnerability in Portal for ArcGIS versions 10.8.1 1.0%
• CVE-2022-38192 Medium 6.1 There is a stored cross-site scripting (XSS) vulnerability in ArcGIS API for JavaScript. 0.6%
• CVE-2022-38193 Medium 6.1 Code injection issue in Portal for ArcGIS (10.7.1 and 10.8.1) 0.9%
• CVE-2022-38194 Medium 6.7 Portal for ArcGIS system properties are not properly encrypted (10.8.1 only) 0.1%
• CVE-2022-38191 Medium 6.1 HTML injection vulnerability in Portal for ArcGIS 0.6%
• CVE-2022-38187 High 7.5 Prevent access to sharing/rest/content/features/analyze to unauthorized users 0.7%
• CVE-2022-38188 High 7.1 There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1 which may allow a remote attacker able to convince a user to click on a crafted link which could potentially execute ar 0.6%
• CVE-2022-38190 Medium 6.1 Stored cross-site scripting vulnerability in Esri Portal for ArcGIS Configurable Apps 0.7%
• CVE-2022-38186 High 7.1 There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.8.1 and below which may allow a remote attacker able to convince a user to click on a crafted link which could potentially 0.6%
• CVE-2021-29110 Medium 5.4 Stored cross-site scripting (XSS) issue in Esri Portal for ArcGIS may allow a remote unauthenticated attacker to pass and store malicious strings in the home application. 0.7%
• CVE-2021-29109 Medium 6.1 A reflected XSS vulnerability in Esri Portal for ArcGIS version 10.9. 0.7%
• CVE-2021-29108 High 8.8 There is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below. 0.8%