esri Vulnerability Advisory Catalog

Total 169 security vulnerabilities recorded for esri software and firmware.

← Back to All Vendors
Component: arcgis_server

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remote, authenticated attacker to c...

๐Ÿ“… 2025-03-03
CVSS 4.8 Dossier →
Component: arcgis_server

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remote, authenticated attacker to c...

๐Ÿ“… 2025-03-03
CVSS 4.8 Dossier →
Component: arcgis_server

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remote, authenticated attacker to c...

๐Ÿ“… 2025-03-03
CVSS 4.8 Dossier →
Component: arcgis_server

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remote, authenticated attacker to c...

๐Ÿ“… 2025-03-03
CVSS 4.8 Dossier →
Component: arcgis_server

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remote, authenticated attacker to c...

๐Ÿ“… 2025-03-03
CVSS 4.8 Dossier →
Component: arcgis_server

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remote, authenticated attacker to c...

๐Ÿ“… 2025-03-03
CVSS 4.8 Dossier →
Component: arcgis_server

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remote, authenticated attacker to c...

๐Ÿ“… 2025-03-03
CVSS 4.8 Dossier →
Component: arcgis_server

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remote, authenticated attacker to c...

๐Ÿ“… 2025-03-03
CVSS 4.8 Dossier →
Component: arcgis_server

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remote, authenticated attacker to c...

๐Ÿ“… 2025-03-03
CVSS 4.8 Dossier →
Component: arcgis_server

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remote, authenticated attacker to c...

๐Ÿ“… 2025-03-03
CVSS 4.8 Dossier →
Component: arcgis_allsource

There is an untrusted search path vulnerability in Esri ArcGIS AllSource 1.2 and 1.3 that may allow a low privileged attacker with write privileges to...

๐Ÿ“… 2025-02-25
CVSS 7.3 Dossier →
Component: arcgis_allsource

There is an untrusted search path vulnerability in Esri ArcGIS Pro 3.3 and 3.4ย that may allow a low privileged attacker with write privileges to the l...

๐Ÿ“… 2025-02-25
CVSS 7.3 Dossier →
CVE-2024-8149 MEDIUM
Component: portal_for_arcgis

There is a reflected Crossโ€‘Site Scripting (XSS) vulnerability in Esri Portal for ArcGIS versions 11.1 and 11.2 that may allow a remote, authenticated ...

๐Ÿ“… 2024-10-04
CVSS 4.6 Dossier →
CVE-2024-8148 MEDIUM
Component: portal_for_arcgis

There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 11.2 and below that may allow a remote, unauthenticated attacker to craft a U...

๐Ÿ“… 2024-10-04
CVSS 6.1 Dossier →
Component: portal_for_arcgis

There is a local file inclusion vulnerability in Esri Portal for ArcGIS 11.2 and below that may allow a remote, unauthenticated attacker to craft a UR...

๐Ÿ“… 2024-10-04
CVSS 7.5 Dossier →
Component: portal_for_arcgis

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.0 and below that may allow a remote, authenticated attacker to create a...

๐Ÿ“… 2024-10-04
CVSS 5.4 Dossier →
Component: portal_for_arcgis

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 11.1 which may allow a remote, unauthenticated attacker to create a crafted ...

๐Ÿ“… 2024-10-04
CVSS 6.1 Dossier →
Component: portal_for_arcgis

There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 11.0 and below that may allow a remote, unauthenticated attacker to craft a U...

๐Ÿ“… 2024-10-04
CVSS 6.1 Dossier →
Component: portal_for_arcgis

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1 and below which may allow a remote, unauthenticated attacker to creat...

๐Ÿ“… 2024-10-04
CVSS 5.4 Dossier →
Component: portal_for_arcgis

There is a reflected cross site scripting in Esri Portal for ArcGIS 11.1 and below on Windows and Linux x64 allows a remote authenticated attacker wit...

๐Ÿ“… 2024-10-04
CVSS 4.8 Dossier →
Component: portal_for_arcgis

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 11.1 and below that may allow a remote, authe...

๐Ÿ“… 2024-10-04
CVSS 4.8 Dossier →
Component: portal_for_arcgis

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Experience Builder versions 11.1 and below that may allow a ...

๐Ÿ“… 2024-10-04
CVSS 4.8 Dossier →
Component: portal_for_arcgis

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise versions 11.1 and below that may allow a remote, authenticat...

๐Ÿ“… 2024-10-04
CVSS 4.8 Dossier →
Component: portal_for_arcgis

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 11.1 and below which may allow a remote, unauthenticated attacker to create ...

๐Ÿ“… 2024-10-04
CVSS 6.1 Dossier →
Page 3 of 8 (169 Total Records)