Esri Portal For Arcgis vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Esri Portal For Arcgis: 29 record(s), with affected versions and fixes.cpe:2.3:a:esri:portal_for_arcgis
CVE-2025-57874
Medium · 4.8
CWE-79 Sep 29, 2025
BUG-000161627 - Reflected XSS vulnerability in Portal for ArcGIS. (11.3, 11.1, 10.9.1)
There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS 11.4 and below that may allow a remote authenticated attacker with administrative access to supply a crafted string which would execute arbitrary JavaScript code in the browser.
CVE-2025-57873
Medium · 4.8
CWE-79 Sep 29, 2025
BUG-000175222 - Reflected XSS vulnerability in Portal for ArcGIS.
There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS 11.4 and below that may allow a remote authenticated attacker with administrative access to supply a crafted string which would execute arbitrary JavaScript code in the browser.
CVE-2025-57872
Medium · 6.1
CWE-601 Sep 29, 2025
BUG-000174150 - Unvalidated redirect in Portal for ArcGIS.
There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 11.4 and below that may allow a remote, unauthenticated attacker to craft a URL that could redirect a victim to an arbitrary website, simplifying phishing attacks.
CVE-2025-57871
Medium · 4.8
CWE-79 Sep 29, 2025
BUG-000174020 - Reflected XSS vulnerability identified in Portal for ArcGIS. (11.3, 11.1, 10.9.1)
There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS 11.4 and below that may allow a remote authenticated attacker with administrative access to supply a crafted string which would execute arbitrary JavaScript code in the browser.