Skip to contentEsri Portal For Arcgis vulnerabilities
- esri portal for arcgis, liferay portal +1 moreReflected XSS in Portal for ArcGISCVE-2024-256986.1 Medium
- esri portal for arcgisPortal for ArcGIS has a directory traversal vulnerability.CVE-2024-256939.9 Critical
- esri portal for arcgis, liferay portal +1 moreconcatenated errors resulting in cross site scripting and frame injection issues.CVE-2024-256957.2 High
- arcgis portal, esri portal for arcgis +1 moreStored XSS in Portal for ArcGISCVE-2024-256964.8 Medium
- esri portal for arcgis, liferay portal +1 moreStored XSS in Portal for ArcGISCVE-2024-256975.4 Medium
- esri portal for arcgisBUG-000154722 - Cross-site request forgery (CSRF) issue in Portal for ArcGISCVE-2024-256925.4 Medium
- esri portal for arcgis sites, portal for arcgis +1 moreBUG-000133088 - ArcGIS Enterprise site builder is subject to stored XSS.CVE-2023-258378.4 High
- esri portal for arcgis sites, portal for arcgis +1 moreBUG-000135364 XSS in 10.8.1 sites builder iframe sourceCVE-2023-258365.4 Medium
- esri portal for arcgis sites, portal for arcgis +1 moreBUG-000153659 ArcGIS Enterprise Sites has a stored XSS vulnerabilityCVE-2023-258358.4 High
- esri portal for arcgisBUG-000155004 HTML injection issue in Portal for ArcGIS.CVE-2023-258335.4 Medium
- esri portal for arcgisBUG-000154236 There is a reflected cross-site scripting (XSS) vulnerability in Portal for ArcGIS.CVE-2023-258316.1 Medium
- esri portal for arcgisBUG-000154662 Reflected XSS vulnerability in Portal for ArcGISCVE-2023-258306.1 Medium
- esri portal for arcgisBUG-000155001 - Unvalidated redirect in Portal for ArcGIS.CVE-2023-258296.1 Medium
- esri portal for arcgisBUG-000142922 Incomplete permission changes in specific cases.CVE-2023-258345.4 Medium
- esri portal for arcgisBUG-000148346 There is a Cross-Site Request Forgery (CSRF) vulnerability in Portal for ArcGIS.CVE-2023-258328.8 High
- esri portal for arcgisThe allowedProxyHosts property is not fully honored in ArcGIS Enterprise (10.8.1 and 10.7.1 only)CVE-2022-382037.5 High
- esri portal for arcgisThere is a stored cross-site scripting (XSS) vulnerability in ArcGIS API for JavaScript.CVE-2022-381895.4 Medium
- esri portal for arcgisThere is an improper access control vulnerability in Portal for ArcGIS versions 10.8.1CVE-2022-381847.5 High
- esri portal for arcgisThere is a stored cross-site scripting (XSS) vulnerability in ArcGIS API for JavaScript.CVE-2022-381926.1 Medium
- esri portal for arcgisCode injection issue in Portal for ArcGIS (10.7.1 and 10.8.1)CVE-2022-381936.1 Medium
- esri portal for arcgisPortal for ArcGIS system properties are not properly encrypted (10.8.1 only)CVE-2022-381946.7 Medium
- esri portal for arcgisHTML injection vulnerability in Portal for ArcGISCVE-2022-381916.1 Medium
- esri portal for arcgisPrevent access to sharing/rest/content/features/analyze to unauthorized usersCVE-2022-381877.5 High
- esri portal for arcgisThere is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1 which may allow...CVE-2022-381887.1 High
- esri portal for arcgisStored cross-site scripting vulnerability in Esri Portal for ArcGIS Configurable AppsCVE-2022-381906.1 Medium
- esri portal for arcgisThere is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.8.1 and below which...CVE-2022-381867.1 High
- esri portal for arcgisStored cross-site scripting (XSS) issue in Esri Portal for ArcGIS may allow a remote unauthenticated attacker to pass and store malicious strings in the home application.CVE-2021-291105.4 Medium
- esri portal for arcgisA reflected XSS vulnerability in Esri Portal for ArcGIS version 10.9.CVE-2021-291096.1 Medium
- esri portal for arcgisThere is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below.CVE-2021-291088.8 High