Advisories · Technology
Esri Portal for ArcGIS.
Every CVE that names Esri Portal for ArcGIS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.7 Medium
Portal for ArcGIS system properties are not properly encrypted (10.8.1 only)
- Esri Portal for ArcGIS
- Weak cryptography or TLS
- CVSS 6.1 Medium
HTML injection vulnerability in Portal for ArcGIS
- Esri Portal for ArcGIS
- Other injection
- CVSS 7.5 High
Prevent access to sharing/rest/content/features/analyze to unauthorized users
- Esri Portal for ArcGIS
- Server-side request forgery (SSRF)
- CVSS 7.1 High
Cross-site scripting in Esri Portal for ArcGIS
- Esri Portal for ArcGIS
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Stored cross-site scripting vulnerability in Esri Portal for ArcGIS Configurable Apps
- Esri Portal for ArcGIS
- Cross-site scripting (XSS)
- CVSS 7.1 High
Cross-site scripting in Esri Portal for ArcGIS
- Esri Portal for ArcGIS
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Stored cross-site scripting (XSS) issue in Esri Portal for ArcGIS may allow a remote unauthenticated attacker to pass and store malicious strings in the home application.
- Esri Portal for ArcGIS
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
A reflected XSS vulnerability in Esri Portal for ArcGIS version 10.9.
- Esri Portal for ArcGIS
- Cross-site scripting (XSS)
- CVSS 8.8 High
There is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below.
- Esri Portal for ArcGIS
- Weak cryptography or TLS