esri Vulnerability Advisory Catalog

Total 169 security vulnerabilities recorded for esri software and firmware.

← Back to All Vendors
Component: portal_for_arcgis

There is a stored Cross‑Site Scripting (XSS) vulnerability in Esri Portal for ArcGIS versions 11.2 and below that may allow a remote, authenticated at...

📅 2024-04-04
CVSS 6.1 Dossier →
Component: arcgis_enterprise

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Web App Builder versions 10.9.1 and below that may allow a r...

📅 2024-04-04
CVSS 4.8 Dossier →
Component: portal_for_arcgis

There is an HTML injection vulnerability in Esri Portal for ArcGIS 11.0 and below that may allow a remote, unauthenticated attacker to craft a URL whi...

📅 2024-04-04
CVSS 6.1 Dossier →
Component: portal_for_arcgis

There is a cross‑site scripting (XSS) vulnerability in Esri Portal for ArcGIS Experience Builder versions 11.1 and below on Windows and Linux that all...

📅 2024-04-04
CVSS 5.4 Dossier →
Component: portal_for_arcgis

There is a difficult‑to‑exploit improper authentication issue in the Home application for Esri Portal for ArcGIS versions 11.2 and below on Windows an...

📅 2024-04-04
CVSS 8.5 Dossier →
Component: portal_for_arcgis

There is a reflected cross site scripting vulnerability in the home application in Esri Portal for ArcGIS 11.1 and below on Windows and Linux that all...

📅 2024-04-04
CVSS 6.1 Dossier →
Component: portal_for_arcgis

There is a Cross-site Scripting vulnerability in Portal for ArcGIS in versions 11.1 and below that may allow a remote, authenticated attacker to creat...

📅 2024-04-04
CVSS 5.4 Dossier →
Component: portal_for_arcgis

There is a Cross-site Scripting vulnerability in Portal for ArcGIS in versions 11.0 and below that may allow a remote, authenticated attacker to creat...

📅 2024-04-04
CVSS 4.8 Dossier →
Component: portal_for_arcgis

There is a Cross-site Scripting vulnerability in Portal for ArcGIS in versions 11.2 and below that may allow a remote, authenticated attacker to provi...

📅 2024-04-04
CVSS 7.2 Dossier →
CVE-2024-25693 CRITICAL
Component: portal_for_arcgis

There is a path traversal in Esri Portal for ArcGIS versions <= 11.2. Successful exploitation may allow a remote, authenticated attacker to traverse ...

📅 2024-04-04
CVSS 9.9 Dossier →
Component: portal_for_arcgis

There is a cross-site-request forgery vulnerability in Esri Portal for ArcGIS Versions 11.1 and below that may in some cases allow a remote, unauthent...

📅 2024-04-04
CVSS 5.4 Dossier →
Component: portal_for_arcgis

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.1 and below that may allow a remote, unauthenticated attacker to create...

📅 2024-04-04
CVSS 4.7 Dossier →
Component: arcgis_server

ArcGIS Enterprise Server versions 11.0 and below have an information disclosure vulnerability where a remote, unauthorized attacker may submit a craft...

📅 2023-08-25
CVSS 5.3 Dossier →
Component: arcgis_server

There is a stored Cross-site Scripting vulnerability in Esri ArcGIS Server versions 11.0 and below on Windows and Linux platforms that may allow a rem...

📅 2023-07-21
CVSS 6.1 Dossier →
Component: arcgis_server

There is a Cross-site Scripting vulnerability in ArcGIS Server in versions 11.1 and below that may allow a remote, authenticated attacker to create a ...

📅 2023-07-21
CVSS 3.4 Dossier →
Component: portal_for_arcgis

There is a Cross‑Site Scripting (XSS) vulnerability in Esri ArcGIS Enterprise Sites versions 10.9 and below that may allow a remote, authenticated att...

📅 2023-07-21
CVSS 8.4 Dossier →
Component: portal_for_arcgis

There is a Cross-site Scripting vulnerability in Esri Portal for ArcGIS Sites in versions 10.9 and below that may allow a remote, authenticated attack...

📅 2023-07-21
CVSS 5.4 Dossier →
Component: portal_for_arcgis

There is a stored Cross‑Site Scripting (XSS) vulnerability in Esri Portal for ArcGIS Sites versions 11.1 and below that may allow a remote, authentica...

📅 2023-07-21
CVSS 8.4 Dossier →
Component: arcgis_insights

There is SQL injection vulnerability in Esri ArcGIS Insights Desktop for Mac and Windows version 2022.1 that may allow a local, authorized attacker ...

📅 2023-07-19
CVSS 7.0 Dossier →
Component: arcgis_insights

There is SQL injection vulnerability in Esri ArcGIS Insights 2022.1 for ArcGIS Enterprise and that may allow a remote, authorized attacker to execute...

📅 2023-07-19
CVSS 7.5 Dossier →
Component: portal_for_arcgis

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.0 and below that may allow a remote, authenticated attacker to create a...

📅 2023-05-10
CVSS 5.4 Dossier →
Component: portal_for_arcgis

There is a cross-site-request forgery vulnerability in Esri Portal for ArcGIS Versions 11.0 and below that may allow an attacker to trick an authorize...

📅 2023-05-09
CVSS 8.8 Dossier →
Component: portal_for_arcgis

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1and below which may allow a remote, unauthenticated attacker to create...

📅 2023-05-09
CVSS 6.1 Dossier →
Component: portal_for_arcgis

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1and before which may allow a remote, unauthenticated attacker to creat...

📅 2023-05-09
CVSS 6.1 Dossier →
Page 4 of 8 (169 Total Records)