VendorsEsriportal_for_arcgis10.9.1
Vulnerabilities

Esri Portal 10.9.1

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

20CVEs
CVE-2024-38040
BUG-000167984 - Portal for ArcGIS has a Local file inclusion (LFI) vulnerability
Published 2024-10-04 · Modified
7.5EPSS 0.005
CVE-2023-25831
BUG-000154236 There is a reflected cross-site scripting (XSS) vulnerability in Portal for ArcGIS.
Published 2023-05-09 · Analyzed
6.1EPSS 0.005
CVE-2023-25830
BUG-000154662 Reflected XSS vulnerability in Portal for ArcGIS
Published 2023-05-09 · Analyzed
6.1EPSS 0.005
CVE-2023-25829
BUG-000155001 - Unvalidated redirect in Portal for ArcGIS.
Published 2023-05-09 · Analyzed
6.1EPSS 0.005
CVE-2024-25709
Self-XSS style in move item dialog
Published 2024-04-04 · Analyzed
6.1EPSS 0.004
CVE-2024-25691
BUG-000165286 - Reflected XSS in Portal for ArcGIS
Published 2024-10-04 · Modified
6.1EPSS 0.003
CVE-2024-38038
BUG-000165732 - Reflected XSS in Portal for ArcGIS
Published 2024-10-04 · Modified
6.1EPSS 0.003
CVE-2024-38037
BUG-000167983 - Unvalidated redirect in Portal for ArcGIS
Published 2024-10-04 · Modified
6.1EPSS 0.003
CVE-2024-8148
BUG-000168624 - Unvalidated redirect in Portal for ArcGIS. (11.2, 11.1, 10.9.1. and 10.8.1)
Published 2024-10-04 · Modified
6.1EPSS 0.003
CVE-2025-57879
BUG-000171009 - URL manipulation vulnerability in Portal for ArcGIS.
Published 2025-09-29 · Analyzed
6.1EPSS 0.002
CVE-2025-57878
BUG-000174149 - The Portal for ArcGIS has an unvalidated redirect.
Published 2025-09-29 · Analyzed
6.1EPSS 0.002
CVE-2025-57872
BUG-000174150 - Unvalidated redirect in Portal for ArcGIS.
Published 2025-09-29 · Analyzed
6.1EPSS 0.002
CVE-2024-38036
BUG-000154827 - Reflected XSS in ArcGIS Experience Builder
Published 2024-10-04 · Modified
5.4EPSS 0.006
CVE-2025-57871
BUG-000174020 - Reflected XSS vulnerability identified in Portal for ArcGIS. (11.3, 11.1, 10.9.1)
Published 2025-09-29 · Analyzed
4.8EPSS 0.002
CVE-2025-57873
BUG-000175222 - Reflected XSS vulnerability in Portal for ArcGIS.
Published 2025-09-29 · Analyzed
4.8EPSS 0.002
CVE-2025-57874
BUG-000161627 - Reflected XSS vulnerability in Portal for ArcGIS.  (11.3, 11.1, 10.9.1)
Published 2025-09-29 · Analyzed
4.8EPSS 0.002
CVE-2025-57875
BUG-000164122 - Reflected XSS vulnerability in Portal for ArcGIS.
Published 2025-09-29 · Analyzed
4.8EPSS 0.002
CVE-2025-57876
Stored XSS vulnerability in Portal for ArcGIS
Published 2025-09-29 · Analyzed
4.8EPSS 0.002
CVE-2025-57877
Reflected XSS vulnerability in Portal for ArcGIS.
Published 2025-09-29 · Analyzed
4.8EPSS 0.002
CVE-2025-55103
BUG-000177333 - ArcGIS Enterprise Sites has a stored Cross-site Scripting vulnerability.
Published 2025-08-21 · Analyzed
4.8EPSS 0.002