Product by Esri
Arcgis
26 known vulnerabilities in Arcgis (Esri), 0 of them actively exploited (CISA KEV).
Key figures
26
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-13019 | Missing Authentication | 9.8 | |
| Critical | CVE-2026-9181 | Directory Traversal in ArcGIS Server | 7.5 | |
| Critical | CVE-2026-10757 | Esri ArcGIS Server: SQL Injection | 9.8 | |
| Critical | CVE-2026-9182 | Esri ArcGIS Server: Unrestricted Upload of File with Dangerous Type | 9.8 | |
| Critical | CVE-2026-69227 | BUG-000187331 Portal for ArcGIS has a security vulnerability | 9.8 | |
| Critical | CVE-2026-13020 | Weak Password Recovery Mechanism in Portal for ArcGIS | 9.8 | |
| High | CVE-2026-33521 | Esri ArcGIS Server: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2026-69225 | information disclosure vulnerability in Esri Portal for ArcGIS | 5.9 | |
| High | CVE-2026-69224 | information disclosure vulnerability in Esri Portal for ArcGIS | 5.9 | |
| Medium | CVE-2026-69228 | missing authentication vulnerability in Esri Portal for ArcGIS | 5.3 | |
| Medium | CVE-2026-69226 | Portal for ArcGIS has a security vulnerability | 6.5 | |
| Medium | CVE-2026-50096 | Esri ArcGIS Server: Cross-site Scripting | 6.1 | |
| Medium | CVE-2026-50095 | Esri ArcGIS Server: Cross-site Scripting | 6.1 | |
| Medium | CVE-2026-33520 | Esri ArcGIS Server: Cross-site Scripting | 6.1 | |
| Medium | CVE-2026-69234 | reflected cross site scripting vulnerability in Esri Portal for ArcGIS | 6.1 | |
| Medium | CVE-2026-33522 | Esri ArcGIS Server: Improper Authorization | 5.3 | |
| Medium | CVE-2026-10759 | BUG-000171040 Portal for ArcGIS has a security vulnerability | 5.5 | |
| Medium | CVE-2026-69235 | stored cross site scripting issue in Esri Portal for ArcGIS | 6.1 | |
| Medium | CVE-2026-69236 | stored cross site scripting issue in Esri Portal for ArcGIS | 6.1 | |
| Medium | CVE-2026-69232 | stored cross site scripting issue in Esri Portal for ArcGIS | 5.5 | |
| Medium | CVE-2026-69231 | stored cross site scripting issue in Esri Portal for ArcGIS | 5.5 | |
| Medium | CVE-2026-69233 | stored cross site scripting issue in Esri Portal for ArcGIS | 5.5 | |
| Medium | CVE-2026-69229 | HTML injection vulnerability in Esri Portal for ArcGIS | 5.4 | |
| Medium | CVE-2026-69230 | stored cross site scripting issue in Esri Portal for ArcGIS | 5.5 | |
| Medium | CVE-2026-69237 | HTML injection vulnerability in Esri Portal for ArcGIS | 3.8 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 27sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 26sans-atrisk-mail,