Login Request a demo
AE
Product
Arcgis Enterprise
by Esri · last CVE Apr 4, 2024
5
CVEs
0
On KEV
8.5
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 4Medium 9Low 0
Severity
All severities13Critical0High4Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Arcgis Enterprise to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-25699
8.5
1%
Apr 4
Portal for ArcGIS has an invalid authentication vulnerability
Affected: through 11.1
CVE-2022-38212
7.5
1%
Dec 29
Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only)
Affected: Portal for ArcGIS through 10.9.1
CVE-2022-38211
7.5
1%
Dec 29
Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS (10.9.1, 10.8.1 and 10.7.1 only)
Affected: Portal for ArcGIS through 10.9.1
CVE-2022-38205
7.5
2%
Dec 29
Portal for ArcGIS has a directory traversal vulnerability (10.9.1, 10.8.1 and 10.7.1 only)
Affected: Portal for ArcGIS through 10.9.1
CVE-2022-38210
6.1
1%
Dec 29
HTML injection in accountswitcher-callback.html (10.9.1, 10.8.1 and 10.7.1 only)
Affected: Portal for ArcGIS through 10.9.1
CVE-2022-38208
6.1
0%
Dec 29
Unvalidated redirect in Portal for ArcGIS
Affected: Portal for ArcGIS through 11.0
CVE-2022-38207
6.1
1%
Dec 29
Reflected XSS vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only)
Affected: Portal for ArcGIS through 10.8.1
CVE-2022-38206
6.1
1%
Dec 29
Reflected XSS vulnerability in Portal for ArcGIS (10.9.1, 10.8.1 and 10.7.1 only)
Affected: Portal for ArcGIS through 10.9.1
CVE-2022-38204
6.1
1%
Dec 29
Reflected XSS vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only)
Affected: Portal for ArcGIS 10.7.1 and 10.8.1
CVE-2021-3012
5.4
1%
Apr 8
A cross-site scripting (XSS) vulnerability in the Document Link of documents in ESRI Enterprise before 10.9 allows remote authenticated users to inject arbitrary JavaScript code…
Affected: before 10.9
CVE-2019-16193
5.4
1%
Sep 11
In ArcGIS Enterprise 10.6.1, a crafted IFRAME element can be used to trigger a Cross Frame Scripting (XFS) attack through the EDIT MY PROFILE feature
Affected: 10.6.1
CVE-2021-29115
5.3
2%
Dec 7
An information disclosure vulnerability in the ArcGIS Service Directory in Esri ArcGIS Enterprise versions 10.9.0 and below may allows a remote attacker to view hidden field names…
Affected: through 10.9
CVE-2024-25708
4.8
0%
Apr 4
Persistent XSS when creating new application using Web App Builder
Affected: 10.8.1; 10.9.1
Showing 13