Skip to contentEsri Arcgis Enterprise vulnerabilities
- esri portal for arcgis enterprise sites, portal for arcgis +1 moreBUG-000177335 ArcGIS Enterprise Sites has a stored Cross-site Scripting vulnerability.CVE-2025-551074.8 Medium
- esri portal for arcgis enterprise sites, portal for arcgis +1 moreBUG-000173171 ArcGIS Enterprise Sites has a Cross-site Scripting vulnerability.CVE-2025-551064.8 Medium
- esri portal for arcgis, portal for arcgis enterprise experience sites +1 moreBUG-000177336 - ArcGIS Enterprise Sites has a stored Cross-site Scripting vulnerability.CVE-2025-551054.8 Medium
- esri portal for arcgis enterprise sites, portal for arcgis +1 moreBUG-000173918 - ArcGIS Enterprise Sites has a security vulnerability.CVE-2025-551044.8 Medium
- esri portal for arcgis enterprise sites, portal for arcgis +1 moreBUG-000177333 - ArcGIS Enterprise Sites has a stored Cross-site Scripting vulnerability.CVE-2025-551034.8 Medium
- esri portal for arcgis enterprise experience builder, portal for arcgis +1 moreBUG-000160765 - Stored XSS in ArcGIS Experience BuilderCVE-2024-257014.8 Medium
- esri portal for arcgis, arcgis enterprise web app builder, enterprise web app builder +2 moreBUG-000160599 - Stored XSS in Portal for ArcGIS Web App BuilderCVE-2024-257024.8 Medium
- esri portal for arcgis, portal for arcgis enterprise experience builder +1 moreBUG-000154827 - Reflected XSS in ArcGIS Experience BuilderCVE-2024-380365.4 Medium
- esri arcgis enterprise builderPersistent XSS in URL added to a shared mapCVE-2024-257004.8 Medium
- esri portal for arcgis, arcgis enterprise web app builder +1 moreHTML injection in ArcGIS Web AppBuilderCVE-2024-256904.7 Medium
- esri arcgis enterprise web app builder, arcgis enterprise +1 morePersistent XSS when creating new application using Web App BuilderCVE-2024-257084.8 Medium
- esri arcgis enterprise server, arcgis server +1 moreBUG-000158039 - There is an information disclosure issue in ArcGIS Server.CVE-2023-258485.3 Medium
- esri arcgis server, arcgis enterprise server +1 moreBUG-000158075 Stored XSS issue in ArcGIS ServerCVE-2023-258416.1 Medium
- esri arcgis server, arcgis enterprise server +1 moreBUG-000154070 Stored XSS issue in the ArcGIS REST Services directoryCVE-2023-258403.4 Low
- esri portal for arcgis, arcgis enterprise +1 moreServer Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only)CVE-2022-382127.5 High
- esri portal for arcgis, arcgis enterprise +1 moreServer Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS (10.9.1, 10.8.1 and 10.7.1 only)CVE-2022-382117.5 High
- esri portal for arcgis, arcgis enterprise +1 moreHTML injection in accountswitcher-callback.html (10.9.1, 10.8.1 and 10.7.1 only)CVE-2022-382106.1 Medium
- esri portal for arcgis, arcgis enterprise +1 moreUnvalidated redirect in Portal for ArcGISCVE-2022-382086.1 Medium
- esri portal for arcgis, arcgis enterprise +1 moreReflected XSS vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only)CVE-2022-382076.1 Medium
- esri portal for arcgis, arcgis enterprise +1 moreReflected XSS vulnerability in Portal for ArcGIS (10.9.1, 10.8.1 and 10.7.1 only)CVE-2022-382066.1 Medium
- esri portal for arcgis, arcgis enterprise +1 morePortal for ArcGIS has a directory traversal vulnerability (10.9.1, 10.8.1 and 10.7.1 only)CVE-2022-382058.6 High
- esri portal for arcgis, arcgis enterprise +1 moreReflected XSS vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only)CVE-2022-382046.1 Medium