Esri vulnerabilities

Products

• Portal For Arcgis 88
• Arcgis Server 69
• Portal For Arcgis 69
• Arcgis Server 64
• Arcgis Enterprise 8
• Arcgis Pro 6
• Arcreader 6
• Arcgis Enterprise 5
• Arcgis Pro 4
• Arcmap 4
• Portal For Arcgis Enterprise Sites 4
• Arcgis Desktop 3
• Arcgis Desktop Background Geoprocessing 3
• Arcgis Engine 3
• Arcgis Engine 3
• Arcgis Enterprise Server 3
• Arcgis Enterprise Web App Builder 3
• Portal For Arcgis Sites 3
• Arcgis Allsource 2
• Arcgis Insights 2
• Arcgis Insights 2
• Arcgis Quickcapture 2
• Arcinfo Workstation 2
• Arcsde 2
• Enterprise Web App Builder 2
• Portal For Arcgis Enterprise Experience Builder 2

Newest

• esri arcgis server BUG-000187164 - ArcGIS Server has a security vulnerability. CVE-2026-50096 6.1 MediumOctober 26, 2026
• esri arcgis server BUG-000187165 - ArcGIS Server has a security vulnerability. CVE-2026-50095 6.1 MediumOctober 26, 2026
• esri arcgis server BUG-000182936 - ArcGIS Server has a security vulnerability. CVE-2026-33522 5.3 MediumOctober 26, 2026
• esri arcgis server BUG-000186514 - ArcGIS Server has a security vulnerability. CVE-2026-33521 7.5 HighOctober 26, 2026
• esri arcgis server BUG-000185167 - ArcGIS Server has a security vulnerability. CVE-2026-33520 6.1 MediumOctober 26, 2026
• esri arcgis server BUG-000187511 - ArcGIS Server has a security vulnerability. CVE-2026-10757 9.8 CriticalOctober 26, 2026
• esri portal for arcgis Portal for ArcGIS has a security vulnerability CVE-2026-69226 6.5 MediumOctober 13, 2026
• esri portal for arcgis BUG-000171040 Portal for ArcGIS has a security vulnerability CVE-2026-10759 5.5 MediumOctober 13, 2026
• esri portal for arcgis BUG-000187331 Portal for ArcGIS has a security vulnerability CVE-2026-69227 9.8 CriticalOctober 13, 2026
• esri lerc Esri Lerc has a security vulnerability CVE-2026-10758 Fix available 7.5 HighSeptember 25, 2026
• esri portal for arcgis stored cross site scripting issue in Esri Portal for ArcGIS CVE-2026-69233 5.5 MediumAugust 21, 2026
• esri portal for arcgis reflected cross site scripting vulnerability in Esri Portal for ArcGIS CVE-2026-69234 6.1 MediumAugust 21, 2026
• esri portal for arcgis stored cross site scripting issue in Esri Portal for ArcGIS CVE-2026-69235 6.1 MediumAugust 21, 2026
• esri portal for arcgis stored cross site scripting issue in Esri Portal for ArcGIS CVE-2026-69236 6.1 MediumAugust 21, 2026
• esri portal for arcgis HTML injection vulnerability in Esri Portal for ArcGIS CVE-2026-69237 3.8 LowAugust 21, 2026
• esri portal for arcgis stored cross site scripting issue in Esri Portal for ArcGIS CVE-2026-69232 5.5 MediumAugust 21, 2026
• esri portal for arcgis stored cross site scripting issue in Esri Portal for ArcGIS CVE-2026-69231 5.5 MediumAugust 21, 2026
• esri portal for arcgis stored cross site scripting issue in Esri Portal for ArcGIS CVE-2026-69230 5.5 MediumAugust 21, 2026
• esri portal for arcgis HTML injection vulnerability in Esri Portal for ArcGIS CVE-2026-69229 5.4 MediumAugust 21, 2026
• esri portal for arcgis missing authentication vulnerability in Esri Portal for ArcGIS CVE-2026-69228 5.3 MediumAugust 21, 2026
• esri portal for arcgis information disclosure vulnerability in Esri Portal for ArcGIS CVE-2026-69225 5.9 MediumAugust 21, 2026
• esri portal for arcgis HTML injection vulnerability in Esri Portal for ArcGIS CVE-2026-69238 3.5 LowAugust 21, 2026
• esri portal for arcgis information disclosure vulnerability in Esri Portal for ArcGIS CVE-2026-69224 5.9 MediumAugust 21, 2026
• esri portal for arcgis Missing Authentication CVE-2026-13019 9.8 CriticalJuly 7, 2026
• esri portal for arcgis Weak Password Recovery Mechanism in Portal for ArcGIS CVE-2026-13020 8.1 HighJuly 7, 2026
• esri arcgis server Directory Traversal in ArcGIS Server CVE-2026-9181 9.8 CriticalJuly 6, 2026
• esri arcgis server Unvalidated File Upload vulnerability in ArcGIS Server. CVE-2026-9182 9.8 CriticalJuly 6, 2026
• esri arcgis server Unvalidated Redirect in ArcGIS Server CVE-2026-2813 4.7 MediumMay 20, 2026
• esri arcgis server Improper Authentication issue in ArcGIS Server CVE-2026-2812 5.3 MediumMay 20, 2026
• esri portal for arcgis Incorrect privilege assignment in Portal for ArcGIS CVE-2026-33519 9.8 CriticalApril 21, 2026
• esri portal for arcgis Incorrect privilege assignment in Portal for ArcGIS CVE-2026-33518 9.8 CriticalApril 21, 2026
• esri arcgis pro XSS issue is Esri ArcGIS Pro versions 3.6.0 and earlier CVE-2026-1446 5.0 MediumJanuary 26, 2026
• esri arcgis server Reflected XSS vulnerability in ArcGIS Server. CVE-2025-67711 6.1 MediumDecember 31, 2025
• esri arcgis server Stored XSS vulnerability in ArcGIS Server CVE-2025-67710 6.1 MediumDecember 31, 2025
• esri arcgis server There is a cross site scripting issue in ArcGIS Server. CVE-2025-67709 6.1 MediumDecember 31, 2025
• esri arcgis server Reflected cross-site scripting (XSS) vulnerability in ArcGIS Server. CVE-2025-67708 6.1 MediumDecember 31, 2025
• esri arcgis server Unvalidated File Upload vulnerability in ArcGIS Server. CVE-2025-67707 5.6 MediumDecember 31, 2025
• esri arcgis server Unvalidated File Upload vulnerability in ArcGIS Server. CVE-2025-67706 5.6 MediumDecember 31, 2025
• esri arcgis server Reflected XSS vulnerability in ArcGIS Server. CVE-2025-67705 6.1 MediumDecember 31, 2025
• esri arcgis server Stored XSS vulnerability in ArcGIS Server. CVE-2025-67704 6.1 MediumDecember 31, 2025
• esri arcgis server Stored XSS vulnerability in ArcGIS Server. CVE-2025-67703 6.1 MediumDecember 31, 2025
• esri arcgis web appbuilder {developer edition) HTML injection issue in ArcGIS Web App Builder CVE-2025-67712 4.7 MediumDecember 19, 2025
• esri arcgis server BUG-000179884 - There is a security vulnerability in ArcGIS Server Feature Services. CVE-2025-57870 10.0 CriticalOctober 22, 2025
• esri portal for arcgis BUG-000174020 - Reflected XSS vulnerability identified in Portal for ArcGIS. (11.3, 11.1, 10.9.1) CVE-2025-57871 4.8 MediumSeptember 29, 2025
• esri portal for arcgis BUG-000174150 - Unvalidated redirect in Portal for ArcGIS. CVE-2025-57872 6.1 MediumSeptember 29, 2025
• esri portal for arcgis BUG-000175222 - Reflected XSS vulnerability in Portal for ArcGIS. CVE-2025-57873 4.8 MediumSeptember 29, 2025
• esri portal for arcgis BUG-000161627 - Reflected XSS vulnerability in Portal for ArcGIS.  (11.3, 11.1, 10.9.1) CVE-2025-57874 4.8 MediumSeptember 29, 2025
• esri portal for arcgis BUG-000164122 - Reflected XSS vulnerability in Portal for ArcGIS. CVE-2025-57875 4.8 MediumSeptember 29, 2025
• esri portal for arcgis Reflected XSS vulnerability in Portal for ArcGIS. CVE-2025-57877 4.8 MediumSeptember 29, 2025
• esri portal for arcgis BUG-000174149 - The Portal for ArcGIS has an unvalidated redirect. CVE-2025-57878 6.1 MediumSeptember 29, 2025
• Show olderLoading…