Esri vulnerabilities
177 CVEs and advisories name Esri as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-51963Stored XSS in ArcGIS Server Manager
- CVE-2024-51962SQL injection vulnerability in ArcGIS Server
- CVE-2024-51961Local file inclusion (LFI) vulnerability in ArcGIS Server
- CVE-2024-51960Stored XSS in ArcGIS Server Administrator Directory
- CVE-2024-51959Stored XSS issue in Server Admin API
- CVE-2024-51958Directory traversal vulnerability in the admin api for service thumbnails
- CVE-2024-51957Stored XSS vulnerability in ArcGIS Rest Services Directory
- CVE-2024-51956Stored XSS vulnerability in ArcGIS Server Administrator Directory
- CVE-2024-51954Unauthorized access to secure services in ArcGIS Server
- CVE-2024-51953Stored XSS in ArcGIS Server Rest services
- CVE-2024-51952Stored XSS issue in ArcGIS Server
- CVE-2024-51951Stored XSS in Server Admin API
- CVE-2024-51950Stored XSS in Server Admin under Services > lifecycleinfos
- CVE-2024-51949Stored XSS vulnerability in Rest Services under OGCFeature Service and Map Service
- CVE-2024-51948Stored XSS vulnerability in Rest Services under Job ID
- CVE-2024-51947Stored XSS vulnerability in Rest Services under Layer name
- CVE-2024-51946Stored XSS in Rest Services Directory under Identify operation
- CVE-2024-51945Stored XSS issues in Server Admin API
- CVE-2024-51944Stored XSS in Rest Services Directory
- CVE-2024-51942Stored XSS vulnerability in Rest Admin API under Hosted Feature Services page
- CVE-2024-10904Stored XSS in Server Admin API
- CVE-2024-5888Stored XSS in Rest Services API for a Toolbox published as GP Service
- CVE-2025-1726[#BUG-000172669 ArcGIS Monitor has a security vulnerability]
- CVE-2025-1068There is a code injection vulnerability in Esri ArcGIS AllSource
- CVE-2025-1067There is a code injection vulnerability in ArcGIS Pro
- CVE-2024-38040BUG-000167984 - Portal for ArcGIS has a Local file inclusion (LFI) vulnerability
- CVE-2024-38038BUG-000165732 - Reflected XSS in Portal for ArcGIS
- CVE-2024-25691BUG-000165286 - Reflected XSS in Portal for ArcGIS
- CVE-2024-25694BUG-000163019 - Stored XSS in Portal for ArcGIS
- CVE-2024-25701BUG-000160765 - Stored XSS in ArcGIS Experience Builder