ES
Vendor
Esri
227
CVEs
0
On KEV
9
New 30D
Products
AS10.0
ArcGIS Server
Esri
75 CVEs0 on KEV6 new
PF9.9
Portal for ArcGIS
Esri
91 CVEs0 on KEV3 new
AP7.8
ArcGIS Pro
Esri
6 CVEs0 on KEV0 new
AR7.8
Arcreader
Esri
6 CVEs0 on KEV0 new
AE8.5
Arcgis Enterprise
Esri
5 CVEs0 on KEV0 new
AR7.8
Arcmap
Esri
4 CVEs0 on KEV0 new
PF4.8
Portal for ArcGIS Enterprise Sites
Esri
4 CVEs0 on KEV0 new
AE7.8
Arcgis Engine
Esri
3 CVEs0 on KEV0 new
AE6.1
ArcGIS Enterprise Server
Esri
3 CVEs0 on KEV0 new
AE4.8
ArcGIS Enterprise Web App Builder
Esri
3 CVEs0 on KEV0 new
PF8.4
Portal for ArcGIS Sites
Esri
3 CVEs0 on KEV0 new
AA7.3
ArcGIS AllSource
Esri
2 CVEs0 on KEV0 new
AI7.5
ArcGIS Insights
Esri
2 CVEs0 on KEV0 new
AW–
Arcinfo Workstation
Esri
2 CVEs0 on KEV0 new
AR–
Arcsde
Esri
2 CVEs0 on KEV0 new
EW4.8
Enterprise Web App Builder
Esri
2 CVEs0 on KEV0 new
PF5.4
Portal for ArcGIS Enterprise Experience Builder
Esri
2 CVEs0 on KEV0 new
AE7.8
Arcgis Earth
Esri
1 CVEs0 on KEV0 new
AE4.8
ArcGIS Enterprise Builder
Esri
1 CVEs0 on KEV0 new
AF–
Arcgis For Desktop
Esri
1 CVEs0 on KEV0 new
AF–
Arcgis For Engine
Esri
1 CVEs0 on KEV0 new
AG7.5
Arcgis Geoevent Server
Esri
1 CVEs0 on KEV0 new
AM4.3
ArcGIS Monitor
Esri
1 CVEs0 on KEV0 new
AQ6.1
Arcgis Quickcapture
Esri
1 CVEs0 on KEV0 new
AW4.7
ArcGIS Web AppBuilder {Developer Edition)
Esri
1 CVEs0 on KEV0 new
AS9.8
Arcgisruntime Sdk
Esri
1 CVEs0 on KEV0 new
AR–
Arcpad
Esri
1 CVEs0 on KEV0 new
LE7.5
Lerc
Esri
1 CVEs0 on KEV0 new
PF4.8
Portal for ArcGIS Enterprise Experience Sites
Esri
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-50096 New | AS ArcGIS Server Esri | 6.1 | Oct 26 | BUG-000187164 - ArcGIS Server has a security vulnerability. |
| CVE-2026-50095 New | AS ArcGIS Server Esri | 6.1 | Oct 26 | BUG-000187165 - ArcGIS Server has a security vulnerability. |
| CVE-2026-33522 New | AS ArcGIS Server Esri | 5.3 | Oct 26 | BUG-000182936 - ArcGIS Server has a security vulnerability. |
| CVE-2026-33521 New | AS ArcGIS Server Esri | 7.5 | Oct 26 | BUG-000186514 - ArcGIS Server has a security vulnerability. |
| CVE-2026-33520 New | AS ArcGIS Server Esri | 6.1 | Oct 26 | BUG-000185167 - ArcGIS Server has a security vulnerability. |
| CVE-2026-10757 New | AS ArcGIS Server Esri | 9.8 | Oct 26 | BUG-000187511 - ArcGIS Server has a security vulnerability. |
| CVE-2026-69226 | PF Portal for ArcGIS Esri | 6.5 | Oct 13 | Portal for ArcGIS has a security vulnerability |
| CVE-2026-10759 | PF Portal for ArcGIS Esri | 5.5 | Oct 13 | BUG-000171040 Portal for ArcGIS has a security vulnerability |
| CVE-2026-69227 | PF Portal for ArcGIS Esri | 9.8 | Oct 13 | BUG-000187331 Portal for ArcGIS has a security vulnerability |
| CVE-2026-10758 | LE Lerc Esri | 7.5 | Sep 25 | Esri Lerc has a security vulnerability |
| CVE-2026-69233 | PF Portal for ArcGIS Esri | 5.5 | Aug 21 | stored cross site scripting issue in Esri Portal for ArcGIS |
| CVE-2026-69234 | PF Portal for ArcGIS Esri | 6.1 | Aug 21 | reflected cross site scripting vulnerability in Esri Portal for ArcGIS |
| CVE-2026-69235 | PF Portal for ArcGIS Esri | 6.1 | Aug 21 | stored cross site scripting issue in Esri Portal for ArcGIS |
| CVE-2026-69236 | PF Portal for ArcGIS Esri | 6.1 | Aug 21 | stored cross site scripting issue in Esri Portal for ArcGIS |
| CVE-2026-69237 | PF Portal for ArcGIS Esri | 4.8 | Aug 21 | HTML injection vulnerability in Esri Portal for ArcGIS |
| CVE-2026-69232 | PF Portal for ArcGIS Esri | 5.5 | Aug 21 | stored cross site scripting issue in Esri Portal for ArcGIS |
| CVE-2026-69231 | PF Portal for ArcGIS Esri | 5.5 | Aug 21 | stored cross site scripting issue in Esri Portal for ArcGIS |
| CVE-2026-69230 | PF Portal for ArcGIS Esri | 4.8 | Aug 21 | stored cross site scripting issue in Esri Portal for ArcGIS |
| CVE-2026-69229 | PF Portal for ArcGIS Esri | 5.4 | Aug 21 | HTML injection vulnerability in Esri Portal for ArcGIS |
| CVE-2026-69228 | PF Portal for ArcGIS Esri | 5.3 | Aug 21 | missing authentication vulnerability in Esri Portal for ArcGIS |
| CVE-2026-69225 | PF Portal for ArcGIS Esri | 7.5 | Aug 21 | information disclosure vulnerability in Esri Portal for ArcGIS |
| CVE-2026-69238 | PF Portal for ArcGIS Esri | 4.8 | Aug 21 | HTML injection vulnerability in Esri Portal for ArcGIS |
| CVE-2026-69224 | PF Portal for ArcGIS Esri | 7.5 | Aug 21 | information disclosure vulnerability in Esri Portal for ArcGIS |
| CVE-2026-13019 | PF Portal for ArcGIS Esri | 9.8 | Jul 7 | Missing Authentication |
| CVE-2026-13020 | PF Portal for ArcGIS Esri | 9.8 | Jul 7 | Weak Password Recovery Mechanism in Portal for ArcGIS |
| CVE-2026-9181 | AS ArcGIS Server Esri | 7.5 | Jul 6 | Directory Traversal in ArcGIS Server |
| CVE-2026-9182 | AS ArcGIS Server Esri | 9.8 | Jul 6 | Unvalidated File Upload vulnerability in ArcGIS Server. |
| CVE-2026-2813 | AS ArcGIS Server Esri | 4.1 | May 20 | Unvalidated Redirect in ArcGIS Server |
| CVE-2026-2812 | AS ArcGIS Server Esri | 5.3 | May 20 | Improper Authentication issue in ArcGIS Server |
| CVE-2026-33519 | PF Portal for ArcGIS Esri | 9.8 | Apr 21 | Incorrect privilege assignment in Portal for ArcGIS |
| CVE-2026-33518 | PF Portal for ArcGIS Esri | 7.2 | Apr 21 | Incorrect privilege assignment in Portal for ArcGIS |
| CVE-2026-1446 | AP ArcGIS Pro Esri | 5.0 | Jan 26 | XSS issue is Esri ArcGIS Pro versions 3.6.0 and earlier |
| CVE-2025-67711 | AS ArcGIS Server Esri | 6.1 | Dec 31 | Reflected XSS vulnerability in ArcGIS Server. |
| CVE-2025-67710 | AS ArcGIS Server Esri | 6.1 | Dec 31 | Stored XSS vulnerability in ArcGIS Server |
| CVE-2025-67709 | AS ArcGIS Server Esri | 6.1 | Dec 31 | There is a cross site scripting issue in ArcGIS Server. |
| CVE-2025-67708 | AS ArcGIS Server Esri | 6.1 | Dec 31 | Reflected cross-site scripting (XSS) vulnerability in ArcGIS Server. |
| CVE-2025-67707 | AS ArcGIS Server Esri | 5.6 | Dec 31 | Unvalidated File Upload vulnerability in ArcGIS Server. |
| CVE-2025-67706 | AS ArcGIS Server Esri | 5.6 | Dec 31 | Unvalidated File Upload vulnerability in ArcGIS Server. |
| CVE-2025-67705 | AS ArcGIS Server Esri | 6.1 | Dec 31 | Reflected XSS vulnerability in ArcGIS Server. |
| CVE-2025-67704 | AS ArcGIS Server Esri | 6.1 | Dec 31 | Stored XSS vulnerability in ArcGIS Server. |
| CVE-2025-67703 | AS ArcGIS Server Esri | 6.1 | Dec 31 | Stored XSS vulnerability in ArcGIS Server. |
| CVE-2025-67712 | AW ArcGIS Web AppBuilder {Developer Edition) Esri | 4.7 | Dec 19 | HTML injection issue in ArcGIS Web App Builder |
| CVE-2025-57870 | AS ArcGIS Server Esri | 10.0 | Oct 22 | BUG-000179884 - There is a security vulnerability in ArcGIS Server Feature Services. |
| CVE-2025-57871 | PF Portal for ArcGIS Esri | 4.8 | Sep 29 | BUG-000174020 - Reflected XSS vulnerability identified in Portal for ArcGIS. (11.3, 11.1, 10.9.1) |
| CVE-2025-57872 | PF Portal for ArcGIS Esri | 6.1 | Sep 29 | BUG-000174150 - Unvalidated redirect in Portal for ArcGIS. |
| CVE-2025-57873 | PF Portal for ArcGIS Esri | 4.8 | Sep 29 | BUG-000175222 - Reflected XSS vulnerability in Portal for ArcGIS. |
| CVE-2025-57874 | PF Portal for ArcGIS Esri | 4.8 | Sep 29 | BUG-000161627 - Reflected XSS vulnerability in Portal for ArcGIS. (11.3, 11.1, 10.9.1) |
| CVE-2025-57875 | PF Portal for ArcGIS Esri | 4.8 | Sep 29 | BUG-000164122 - Reflected XSS vulnerability in Portal for ArcGIS. |
| CVE-2025-57877 | PF Portal for ArcGIS Esri | 4.8 | Sep 29 | Reflected XSS vulnerability in Portal for ArcGIS. |
| CVE-2025-57878 | PF Portal for ArcGIS Esri | 6.1 | Sep 29 | BUG-000174149 - The Portal for ArcGIS has an unvalidated redirect. |
| CVE-2025-57879 | PF Portal for ArcGIS Esri | 6.1 | Sep 29 | BUG-000171009 - URL manipulation vulnerability in Portal for ArcGIS. |
| CVE-2025-57876 | PF Portal for ArcGIS Esri | 4.8 | Sep 29 | Stored XSS vulnerability in Portal for ArcGIS |
| CVE-2025-55107 | PF Portal for ArcGIS Enterprise Sites Esri | 4.8 | Aug 21 | BUG-000177335 ArcGIS Enterprise Sites has a stored Cross-site Scripting vulnerability. |
| CVE-2025-55106 | PF Portal for ArcGIS Enterprise Sites Esri | 4.8 | Aug 21 | BUG-000173171 ArcGIS Enterprise Sites has a Cross-site Scripting vulnerability. |
| CVE-2025-55105 | PF Portal for ArcGIS Enterprise Experience Sites Esri | 4.8 | Aug 21 | BUG-000177336 - ArcGIS Enterprise Sites has a stored Cross-site Scripting vulnerability. |
| CVE-2025-55104 | PF Portal for ArcGIS Enterprise Sites Esri | 4.8 | Aug 21 | BUG-000173918 - ArcGIS Enterprise Sites has a security vulnerability. |
| CVE-2025-55103 | PF Portal for ArcGIS Enterprise Sites Esri | 4.8 | Aug 21 | BUG-000177333 - ArcGIS Enterprise Sites has a stored Cross-site Scripting vulnerability. |
| CVE-2025-4967 | PF Portal for ArcGIS Esri | 9.1 | May 29 | Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS |
| CVE-2025-2538 | PF Portal for ArcGIS Esri | 9.8 | Mar 20 | BUG-000174336 |
| CVE-2024-51966 | AS ArcGIS Server Esri | 4.9 | Mar 3 | Directory traversal vulnerability in ArcGIS Server |