VendorsEsriportal_for_arcgis11.4
Vulnerabilities

Esri Portal 11.4

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

22CVEs
CVE-2026-33519
Incorrect privilege assignment in Portal for ArcGIS
Published 2026-04-21 · Analyzed
9.8EPSS 0.005
CVE-2026-69224
information disclosure vulnerability in Esri Portal for ArcGIS
Published 2026-08-21 · Analyzed
7.5EPSS 0.005
CVE-2026-69234
reflected cross site scripting vulnerability in Esri Portal for ArcGIS
Published 2026-08-21 · Analyzed
6.1EPSS 0.003
CVE-2026-69236
stored cross site scripting issue in Esri Portal for ArcGIS
Published 2026-08-21 · Analyzed
6.1EPSS 0.003
CVE-2026-69235
stored cross site scripting issue in Esri Portal for ArcGIS
Published 2026-08-21 · Analyzed
6.1EPSS 0.003
CVE-2025-57872
BUG-000174150 - Unvalidated redirect in Portal for ArcGIS.
Published 2025-09-29 · Analyzed
6.1EPSS 0.002
CVE-2025-57878
BUG-000174149 - The Portal for ArcGIS has an unvalidated redirect.
Published 2025-09-29 · Analyzed
6.1EPSS 0.002
CVE-2025-57879
BUG-000171009 - URL manipulation vulnerability in Portal for ArcGIS.
Published 2025-09-29 · Analyzed
6.1EPSS 0.002
CVE-2026-69232
stored cross site scripting issue in Esri Portal for ArcGIS
Published 2026-08-21 · Analyzed
5.5EPSS 0.003
CVE-2026-69231
stored cross site scripting issue in Esri Portal for ArcGIS
Published 2026-08-21 · Analyzed
5.5EPSS 0.003
CVE-2026-69233
stored cross site scripting issue in Esri Portal for ArcGIS
Published 2026-08-21 · Analyzed
5.5EPSS 0.003
CVE-2026-69230
stored cross site scripting issue in Esri Portal for ArcGIS
Published 2026-08-21 · Analyzed
5.5EPSS 0.002
CVE-2026-69229
HTML injection vulnerability in Esri Portal for ArcGIS
Published 2026-08-21 · Analyzed
5.4EPSS 0.003
CVE-2026-69228
missing authentication vulnerability in Esri Portal for ArcGIS
Published 2026-08-21 · Analyzed
5.3EPSS 0.005
CVE-2026-69238
HTML injection vulnerability in Esri Portal for ArcGIS
Published 2026-08-21 · Analyzed
4.8EPSS 0.002
CVE-2025-57877
Reflected XSS vulnerability in Portal for ArcGIS.
Published 2025-09-29 · Analyzed
4.8EPSS 0.002
CVE-2025-57876
Stored XSS vulnerability in Portal for ArcGIS
Published 2025-09-29 · Analyzed
4.8EPSS 0.002
CVE-2025-57875
BUG-000164122 - Reflected XSS vulnerability in Portal for ArcGIS.
Published 2025-09-29 · Analyzed
4.8EPSS 0.002
CVE-2025-57874
BUG-000161627 - Reflected XSS vulnerability in Portal for ArcGIS.  (11.3, 11.1, 10.9.1)
Published 2025-09-29 · Analyzed
4.8EPSS 0.002
CVE-2025-57873
BUG-000175222 - Reflected XSS vulnerability in Portal for ArcGIS.
Published 2025-09-29 · Analyzed
4.8EPSS 0.002
CVE-2025-57871
BUG-000174020 - Reflected XSS vulnerability identified in Portal for ArcGIS. (11.3, 11.1, 10.9.1)
Published 2025-09-29 · Analyzed
4.8EPSS 0.002
CVE-2025-55103
BUG-000177333 - ArcGIS Enterprise Sites has a stored Cross-site Scripting vulnerability.
Published 2025-08-21 · Analyzed
4.8EPSS 0.002