VendorsEsriarcgis_enterpriseany version
Vulnerabilities

Esri Arcgis Enterprise any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2024-25699
Portal for ArcGIS has an invalid authentication vulnerability
Published 2024-04-04 · Analyzed
8.5EPSS 0.007
CVE-2021-3012
A cross-site scripting (XSS) vulnerability in the Document Link of documents in ESRI Enterprise before 10.9 allows remote authenticated users to inject arbitrary JavaScript code via a malicious HTML attribute such as onerror (in the URL field of the Parameters tab).
Published 2021-04-08 · Modified
5.4EPSS 0.007
CVE-2021-29115
An information disclosure vulnerability
Published 2021-12-07 · Modified
5.3EPSS 0.022