Skip to contentEsri vulnerabilities
Newest
- esri portal for arcgisBUG-000171009 - URL manipulation vulnerability in Portal for ArcGIS.CVE-2025-578796.1 Medium
- esri portal for arcgisStored XSS vulnerability in Portal for ArcGISCVE-2025-578764.8 Medium
- esri portal for arcgis enterprise sites, portal for arcgis +1 moreBUG-000177335 ArcGIS Enterprise Sites has a stored Cross-site Scripting vulnerability.CVE-2025-551074.8 Medium
- esri portal for arcgis enterprise sites, portal for arcgis +1 moreBUG-000173171 ArcGIS Enterprise Sites has a Cross-site Scripting vulnerability.CVE-2025-551064.8 Medium
- esri portal for arcgis, portal for arcgis enterprise experience sites +1 moreBUG-000177336 - ArcGIS Enterprise Sites has a stored Cross-site Scripting vulnerability.CVE-2025-551054.8 Medium
- esri portal for arcgis enterprise sites, portal for arcgis +1 moreBUG-000173918 - ArcGIS Enterprise Sites has a security vulnerability.CVE-2025-551044.8 Medium
- esri portal for arcgis enterprise sites, portal for arcgis +1 moreBUG-000177333 - ArcGIS Enterprise Sites has a stored Cross-site Scripting vulnerability.CVE-2025-551034.8 Medium
- esri portal for arcgisServer Side Request Forgery (SSRF) vulnerability in Portal for ArcGISCVE-2025-49679.1 Critical
- esri portal for arcgisBUG-000174336CVE-2025-25389.8 Critical
- esri arcgis serverDirectory traversal vulnerability in ArcGIS ServerCVE-2024-519664.9 Medium
- esri arcgis serverStored XSS in ArcGIS Server ManagerCVE-2024-519634.8 Medium
- esri arcgis serverSQL injection vulnerability in ArcGIS ServerCVE-2024-519628.7 High
- esri arcgis serverLocal file inclusion (LFI) vulnerability in ArcGIS ServerCVE-2024-519617.5 High
- esri arcgis serverStored XSS in ArcGIS Server Administrator DirectoryCVE-2024-519604.8 Medium
- esri arcgis serverStored XSS issue in Server Admin APICVE-2024-519594.8 Medium
- esri arcgis serverDirectory traversal vulnerability in the admin api for service thumbnailsCVE-2024-519584.9 Medium
- esri arcgis serverStored XSS vulnerability in ArcGIS Rest Services DirectoryCVE-2024-519574.8 Medium
- esri arcgis serverStored XSS vulnerability in ArcGIS Server Administrator DirectoryCVE-2024-519564.8 Medium
- esri arcgis serverUnauthorized access to secure services in ArcGIS ServerCVE-2024-519548.5 High
- esri arcgis serverStored XSS in ArcGIS Server Rest servicesCVE-2024-519534.8 Medium
- esri arcgis serverStored XSS issue in ArcGIS ServerCVE-2024-519524.8 Medium
- esri arcgis serverStored XSS in Server Admin APICVE-2024-519514.8 Medium
- esri arcgis serverStored XSS in Server Admin under Services > lifecycleinfosCVE-2024-519504.8 Medium
- esri arcgis serverStored XSS vulnerability in Rest Services under OGCFeature Service and Map ServiceCVE-2024-519494.8 Medium
- esri arcgis serverStored XSS vulnerability in Rest Services under Job IDCVE-2024-519484.8 Medium
- esri arcgis serverStored XSS vulnerability in Rest Services under Layer nameCVE-2024-519474.8 Medium
- esri arcgis serverStored XSS in Rest Services Directory under Identify operationCVE-2024-519464.8 Medium
- esri arcgis serverStored XSS issues in Server Admin APICVE-2024-519454.8 Medium
- esri arcgis serverStored XSS in Rest Services DirectoryCVE-2024-519444.8 Medium
- esri arcgis serverStored XSS vulnerability in Rest Admin API under Hosted Feature Services pageCVE-2024-519424.8 Medium
- esri arcgis serverStored XSS in Server Admin APICVE-2024-109044.8 Medium
- esri arcgis serverStored XSS in Rest Services API for a Toolbox published as GP ServiceCVE-2024-58884.8 Medium
- esri arcgis monitor[#BUG-000172669 ArcGIS Monitor has a security vulnerability]CVE-2025-17264.3 Medium
- esri arcgis allsource, arcgis pro +1 moreThere is a code injection vulnerability in Esri ArcGIS AllSourceCVE-2025-10687.3 High
- esri arcgis pro, arcgis allsource +1 moreThere is a code injection vulnerability in ArcGIS ProCVE-2025-10677.3 High
- esri portal for arcgis, liferay portal +1 moreBUG-000167984 - Portal for ArcGIS has a Local file inclusion (LFI) vulnerabilityCVE-2024-380407.5 High
- esri portal for arcgisBUG-000165732 - Reflected XSS in Portal for ArcGISCVE-2024-380386.1 Medium
- esri portal for arcgisBUG-000165286 - Reflected XSS in Portal for ArcGISCVE-2024-256916.1 Medium
- esri portal for arcgis, enterprise web app builder +1 moreBUG-000163019 - Stored XSS in Portal for ArcGISCVE-2024-256944.8 Medium
- esri portal for arcgis enterprise experience builder, portal for arcgis +1 moreBUG-000160765 - Stored XSS in ArcGIS Experience BuilderCVE-2024-257014.8 Medium
- esri portal for arcgis, arcgis enterprise web app builder, enterprise web app builder +2 moreBUG-000160599 - Stored XSS in Portal for ArcGIS Web App BuilderCVE-2024-257024.8 Medium
- esri portal for arcgisBUG-000160241 - Reflected XSS in Portal for ArcGISCVE-2024-257074.8 Medium
- esri portal for arcgis, portal for arcgis enterprise experience builder +1 moreBUG-000154827 - Reflected XSS in ArcGIS Experience BuilderCVE-2024-380365.4 Medium
- esri portal for arcgisBUG-000168624 - Unvalidated redirect in Portal for ArcGIS.CVE-2024-81494.6 Medium
- esri portal for arcgisBUG-000161683 - HTML injection vulnerability in Portal for ArcGIS.CVE-2024-380395.4 Medium
- esri portal for arcgisBUG-000168624 - Unvalidated redirect in Portal for ArcGIS. (11.2, 11.1, 10.9.1. and 10.8.1)CVE-2024-81486.1 Medium
- esri portal for arcgisBUG-000167983 - Unvalidated redirect in Portal for ArcGISCVE-2024-380376.1 Medium
- esri arcgis enterprise, portal for arcgis +1 morePortal for ArcGIS has an invalid authentication vulnerabilityCVE-2024-256998.5 High
- esri portal for arcgisCross site scripting issue in embed widgetCVE-2024-257055.4 Medium
- esri portal for arcgisHTMLi at createFolder Content InjectionCVE-2024-257066.1 Medium
- Show moreLoading…