Esri vulnerabilities
177 CVEs and advisories name Esri as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-25702BUG-000160599 - Stored XSS in Portal for ArcGIS Web App Builder
- CVE-2024-25707BUG-000160241 - Reflected XSS in Portal for ArcGIS
- CVE-2024-38036BUG-000154827 - Reflected XSS in ArcGIS Experience Builder
- CVE-2024-8149BUG-000168624 - Unvalidated redirect in Portal for ArcGIS.
- CVE-2024-38039BUG-000161683 - HTML injection vulnerability in Portal for ArcGIS.
- CVE-2024-8148BUG-000168624 - Unvalidated redirect in Portal for ArcGIS. (11.2, 11.1, 10.9.1. and 10.8.1)
- CVE-2024-38037BUG-000167983 - Unvalidated redirect in Portal for ArcGIS
- CVE-2024-25699Portal for ArcGIS has an invalid authentication vulnerability
- CVE-2024-25705Cross site scripting issue in embed widget
- CVE-2024-25706HTMLi at createFolder Content Injection
- CVE-2024-25709Self-XSS style in move item dialog
- CVE-2024-25700Persistent XSS in URL added to a shared map
- CVE-2024-25698Reflected XSS in Portal for ArcGIS
- CVE-2024-25693Portal for ArcGIS has a directory traversal vulnerability.
- CVE-2024-25695concatenated errors resulting in cross site scripting and frame injection issues.
- CVE-2024-25696Stored XSS in Portal for ArcGIS
- CVE-2024-25697Stored XSS in Portal for ArcGIS
- CVE-2024-25690HTML injection in ArcGIS Web AppBuilder
- CVE-2024-25708Persistent XSS when creating new application using Web App Builder
- CVE-2024-25692BUG-000154722 - Cross-site request forgery (CSRF) issue in Portal for ArcGIS
- CVE-2023-25848BUG-000158039 - There is an information disclosure issue in ArcGIS Server.
- CVE-2023-25841BUG-000158075 Stored XSS issue in ArcGIS Server
- CVE-2023-25840BUG-000154070 Stored XSS issue in the ArcGIS REST Services directory
- CVE-2023-25837BUG-000133088 - ArcGIS Enterprise site builder is subject to stored XSS.
- CVE-2023-25836BUG-000135364 XSS in 10.8.1 sites builder iframe source
- CVE-2023-25835BUG-000153659 ArcGIS Enterprise Sites has a stored XSS vulnerability
- CVE-2023-25839BUG-000157278 – ArcGIS Insights has a security vulnerability - desktop
- CVE-2023-25838BUG-000157278 – ArcGIS Insights has a security vulnerability.
- CVE-2023-25833BUG-000155004 HTML injection issue in Portal for ArcGIS.
- CVE-2023-25831BUG-000154236 There is a reflected cross-site scripting (XSS) vulnerability in Portal for ArcGIS.