Product by Esri

    Esri Portal for ArcGIS

    91 known vulnerabilities in Esri Portal for ArcGIS (Esri), 0 of them actively exploited (CISA KEV).

    Key figures

    91

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    9

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Esri Portal for ArcGIS (Esri)
    CriticalCVE-2026-13019

    Missing Authentication

    also in 1 other product

    		9.8
    CriticalCVE-2024-25693

    Esri Portal for ArcGIS: Path Traversal

    		9.9
    HighCVE-2022-38205

    Portal for ArcGIS has a directory traversal vulnerability (10.9.1, 10.8.1 and 10.7.1 only)

    also in 1 other product

    		8.6
    CriticalCVE-2026-69227

    BUG-000187331 Portal for ArcGIS has a security vulnerability

    also in 1 other product

    		9.8
    CriticalCVE-2026-13020

    Weak Password Recovery Mechanism in Portal for ArcGIS

    also in 1 other product

    		9.8
    HighCVE-2023-25837

    Esri Portal for ArcGIS Sites: Cross-site Scripting

    also in 1 other product

    		8.4
    CriticalCVE-2025-2538

    BUG-000174336

    		9.8
    CriticalCVE-2025-4967

    Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS

    		9.1
    HighCVE-2023-25835

    BUG-000153659 ArcGIS Enterprise Sites has a stored XSS vulnerability

    also in 1 other product

    		8.4
    HighCVE-2022-38184

    There is an improper access control vulnerability in Portal for ArcGIS versions 10.8.1

    		7.5
    CriticalCVE-2026-33519

    Incorrect privilege assignment in Portal for ArcGIS

    		9.8
    HighCVE-2021-29108

    Esri Portal for ArcGIS: Improper Verification of Cryptographic Signature

    		8.8
    HighCVE-2024-25699

    Portal for ArcGIS has an invalid authentication vulnerability

    also in 1 other product

    		8.5
    HighCVE-2022-38211

    Esri ArcGIS Enterprise: Server-Side Request Forgery (SSRF)

    also in 1 other product

    		7.5
    HighCVE-2026-69225

    information disclosure vulnerability in Esri Portal for ArcGIS

    also in 1 other product

    		5.9
    HighCVE-2026-69224

    information disclosure vulnerability in Esri Portal for ArcGIS

    also in 1 other product

    		5.9
    MediumCVE-2026-69228

    missing authentication vulnerability in Esri Portal for ArcGIS

    also in 1 other product

    		5.3
    HighCVE-2022-38212

    Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only)

    also in 1 other product

    		7.5
    HighCVE-2022-38203

    The allowedProxyHosts property is not fully honored in ArcGIS Enterprise (10.8.1 and 10.7.1 only)

    		7.5
    MediumCVE-2026-69226

    Portal for ArcGIS has a security vulnerability

    also in 1 other product

    		6.5
    HighCVE-2022-38187

    Prevent access to sharing/rest/content/features/analyze to unauthorized users

    		7.5
    MediumCVE-2026-69234

    reflected cross site scripting vulnerability in Esri Portal for ArcGIS

    also in 1 other product

    		6.1
    CriticalCVE-2022-38193

    Code injection issue in Portal for ArcGIS (10.7.1 and 10.8.1)

    		6.1
    MediumCVE-2026-10759

    BUG-000171040 Portal for ArcGIS has a security vulnerability

    also in 1 other product

    		5.5
    MediumCVE-2026-69235

    stored cross site scripting issue in Esri Portal for ArcGIS

    also in 1 other product

    		6.1

    All vulnerabilities in search

    News

    All products by Esri