Skip to contentEsri vulnerabilities
Newest
- esri portal for arcgisSelf-XSS style in move item dialogCVE-2024-257096.1 Medium
- esri arcgis enterprise builderPersistent XSS in URL added to a shared mapCVE-2024-257004.8 Medium
- esri portal for arcgis, liferay portal +1 moreReflected XSS in Portal for ArcGISCVE-2024-256986.1 Medium
- esri portal for arcgisPortal for ArcGIS has a directory traversal vulnerability.CVE-2024-256939.9 Critical
- esri portal for arcgis, liferay portal +1 moreconcatenated errors resulting in cross site scripting and frame injection issues.CVE-2024-256957.2 High
- arcgis portal, esri portal for arcgis +1 moreStored XSS in Portal for ArcGISCVE-2024-256964.8 Medium
- esri portal for arcgis, liferay portal +1 moreStored XSS in Portal for ArcGISCVE-2024-256975.4 Medium
- esri portal for arcgis, arcgis enterprise web app builder +1 moreHTML injection in ArcGIS Web AppBuilderCVE-2024-256904.7 Medium
- esri arcgis enterprise web app builder, arcgis enterprise +1 morePersistent XSS when creating new application using Web App BuilderCVE-2024-257084.8 Medium
- esri portal for arcgisBUG-000154722 - Cross-site request forgery (CSRF) issue in Portal for ArcGISCVE-2024-256925.4 Medium
- esri arcgis enterprise server, arcgis server +1 moreBUG-000158039 - There is an information disclosure issue in ArcGIS Server.CVE-2023-258485.3 Medium
- esri arcgis server, arcgis enterprise server +1 moreBUG-000158075 Stored XSS issue in ArcGIS ServerCVE-2023-258416.1 Medium
- esri arcgis server, arcgis enterprise server +1 moreBUG-000154070 Stored XSS issue in the ArcGIS REST Services directoryCVE-2023-258403.4 Low
- esri portal for arcgis sites, portal for arcgis +1 moreBUG-000133088 - ArcGIS Enterprise site builder is subject to stored XSS.CVE-2023-258378.4 High
- esri portal for arcgis sites, portal for arcgis +1 moreBUG-000135364 XSS in 10.8.1 sites builder iframe sourceCVE-2023-258365.4 Medium
- esri portal for arcgis sites, portal for arcgis +1 moreBUG-000153659 ArcGIS Enterprise Sites has a stored XSS vulnerabilityCVE-2023-258358.4 High
- esri arcgis insightsBUG-000157278 – ArcGIS Insights has a security vulnerability - desktopCVE-2023-258397.0 High
- esri arcgis insightsBUG-000157278 – ArcGIS Insights has a security vulnerability.CVE-2023-258387.5 High
- esri portal for arcgisBUG-000155004 HTML injection issue in Portal for ArcGIS.CVE-2023-258335.4 Medium
- esri portal for arcgisBUG-000154236 There is a reflected cross-site scripting (XSS) vulnerability in Portal for ArcGIS.CVE-2023-258316.1 Medium
- esri portal for arcgisBUG-000154662 Reflected XSS vulnerability in Portal for ArcGISCVE-2023-258306.1 Medium
- esri portal for arcgisBUG-000155001 - Unvalidated redirect in Portal for ArcGIS.CVE-2023-258296.1 Medium
- esri portal for arcgisBUG-000142922 Incomplete permission changes in specific cases.CVE-2023-258345.4 Medium
- esri portal for arcgisBUG-000148346 There is a Cross-Site Request Forgery (CSRF) vulnerability in Portal for ArcGIS.CVE-2023-258328.8 High
- esri portal for arcgis, arcgis enterprise +1 moreServer Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only)CVE-2022-382127.5 High
- esri portal for arcgis, arcgis enterprise +1 moreServer Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS (10.9.1, 10.8.1 and 10.7.1 only)CVE-2022-382117.5 High
- esri portal for arcgis, arcgis enterprise +1 moreHTML injection in accountswitcher-callback.html (10.9.1, 10.8.1 and 10.7.1 only)CVE-2022-382106.1 Medium
- esri portal for arcgis, arcgis quickcapture +1 moreReflected XSS vulnerability in Portal for ArcGISCVE-2022-382096.1 Medium
- esri portal for arcgis, arcgis enterprise +1 moreUnvalidated redirect in Portal for ArcGISCVE-2022-382086.1 Medium
- esri portal for arcgis, arcgis enterprise +1 moreReflected XSS vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only)CVE-2022-382076.1 Medium
- esri portal for arcgis, arcgis enterprise +1 moreReflected XSS vulnerability in Portal for ArcGIS (10.9.1, 10.8.1 and 10.7.1 only)CVE-2022-382066.1 Medium
- esri portal for arcgis, arcgis enterprise +1 morePortal for ArcGIS has a directory traversal vulnerability (10.9.1, 10.8.1 and 10.7.1 only)CVE-2022-382058.6 High
- esri portal for arcgis, arcgis enterprise +1 moreReflected XSS vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only)CVE-2022-382046.1 Medium
- esri portal for arcgisThe allowedProxyHosts property is not fully honored in ArcGIS Enterprise (10.8.1 and 10.7.1 only)CVE-2022-382037.5 High
- esri arcgis serverBUG-000152121 - Directory traversal vulnerability in ArcGIS Server.CVE-2022-382027.5 High
- esri arcgis quickcapture, arcgis quickcapture +1 moreAn unvalidated redirect vulnerability exists in Esri ArcGIS Quick Capture Web Designer versions 10.8.1 to 10.9.1.CVE-2022-382016.1 Medium
- esri arcgis serverBUG-000150540 - Reflected XSS vulnerability in ArcGIS ServerCVE-2022-381956.1 Medium
- esri arcgis serverBUG-000150537 - ArcGIS Server has a local file inclusion (LFI) vulnerabilityCVE-2022-381966.5 Medium
- esri arcgis serverBUG-000148347 Unvalidated redirect issues in ArcGIS Server.CVE-2022-381976.1 Medium
- esri arcgis serverBUG-000146513 - Reflected XSS vulnerability in ArcGIS ServerCVE-2022-381986.1 Medium
- esri arcgis serverBUG-000144172 - Remote file download issue in ArcGIS ServerCVE-2022-381996.1 Medium
- esri arcgis serverBUG-000142376 - Reflected Cross-Site Scripting (XSS) vulnerability in ArcGIS Server.CVE-2022-382006.1 Medium
- esri portal for arcgisThere is a stored cross-site scripting (XSS) vulnerability in ArcGIS API for JavaScript.CVE-2022-381895.4 Medium
- esri portal for arcgisThere is an improper access control vulnerability in Portal for ArcGIS versions 10.8.1CVE-2022-381847.5 High
- esri portal for arcgisThere is a stored cross-site scripting (XSS) vulnerability in ArcGIS API for JavaScript.CVE-2022-381926.1 Medium
- esri portal for arcgisCode injection issue in Portal for ArcGIS (10.7.1 and 10.8.1)CVE-2022-381936.1 Medium
- esri portal for arcgisPortal for ArcGIS system properties are not properly encrypted (10.8.1 only)CVE-2022-381946.7 Medium
- esri portal for arcgisHTML injection vulnerability in Portal for ArcGISCVE-2022-381916.1 Medium
- esri portal for arcgisPrevent access to sharing/rest/content/features/analyze to unauthorized usersCVE-2022-381877.5 High
- esri portal for arcgisThere is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1 which may allow...CVE-2022-381887.1 High
- Show moreLoading…